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EMBEDDED WEB SERVER 

COPYRIGHT NOTICE 

The tables attached to the disclosure of this patent contain material that is subject to 
copyright protection. The copyright owner has no objection to the facsimile reproduction by 
anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark 
Office patent file or records, but otherwise reserves all copyright rights whatsoever. 

TABLES 

Table A is a functional specification of the Agranat Systems, Inc. Em Web™ product; and 
Table B is a source code listing in the C programming language of header files defining 

data structures representing an archive of content as used by the Em Web™ product. 

The noted tables are provided to show an example of a particular embodiment of the 

invention incorporating features thereof which are described in detail below. 

CROSS-REFERENCE TO RELATED APPLICATION 

Priority is claimed under 35 U.S.C. §1 19(e) to the inventors' Provisional U.S. Patent 
Application Serial No. 08/023,373, entitled EXTENDED LANGUAGE COMPILER AND RUN 
TIME SERVER, filed August 8, 1996, now pending. The inventors' above-identified provisional 
U.S. patent application is incorporated herein by reference. 

L Field of the Invention 

The present invention relates generally to graphical user interfaces (GUIs), i.e. user 
interfaces in which information can be presented in both textual form and graphical form. More 
particularly, the invention relates to GUIs used to control, manage, configure, monitor and 
diagnose software and hardware applications, devices and equipment using a World-Wide- Web 
client/server communications model. Yet more particularly, the invention relates to methods and 
apparatus for developing and using such GUIs based on a World- Wide- Web client/server 
communications model. 
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2. Rented Art 

Many modern communications, entertainment and other electronic devices require or 
could benefit from improved local or remote control, management configuration, monitoring 
and diagnosing. It is common for such devices to be controlled by a software application 
5 program specifically written for each device. The design of such a device includes any hardware 
and operating environment software needed to support the application, which is then referred to 
as an embedded application, because it is embedded within the device. Embedded application 
programs are generally written in a high-level programming language such as C, C++, etc., 
referred to herein as a native application programming language. Other languages suitable to 

10 particular uses may also be employed. The application program communicates with users 
through a user interface, generally written in the same high-level language as the application. 

The representation of an application in a native application programming language is 
referred to as the application program source code. A corresponding representation which can be 
executed on a processor is referred to as an executable image. 

15 Before an application written in a high-level language can be executed it must be 

compiled and linked to transform the application source code into an executable image. A 
compiler receives as an input a file containing the application source code and produces as an 
output a file in a format referred to as object code. Finally, one or more object code files are 
linked to form the executable image. Linking resolves references an object module may make 

20 outside of that object module, such as addresses, symbols or functions defined elsewhere. 

Source code may also define arrangements by which data can be stored in memory and 
conveniently referred to symbolically. Such defined arrangements are referred to as data 
structures because they represent the physical arrangement of data within memory, i.e., the 
structure into which the data is organized. 

25 Most commonly, remote control, management, configuration, monitoring and diagnosing 

applications employ unique proprietary user interfaces integrated with the application software 
and embedded into the device. Frequently these user interfaces present and receive information 
in text form only. Moreover, they are not portable, generally being designed to operate on a 
specific platform, i.e., combination of hardware and software. The devices for which control, 

30 management, configuration and diagnosing are desired have only limited run-time resources 
available, such as memory and long-term storage space. Proprietary interfaces are frequently 
designed with such limitations to data presentation, data acquisition and portability because of 
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the development costs incurred in providing such features and in order to keep the size and run- 
time resource requirements of the user interface to a minimum. Since each user interface tends to 
be unique to the particular remote control management, configuration, monitoring or diagnosing 
function desired, as well as unique to the operating system, application and hardware platform 
5 upon which these operations are performed, significant time and/or other resources may be 
expended in development. Graphics handling and portability have therefore been considered 
luxuries too expensive for most applications. 

However, as the range of products available requiring control, management, 
configuration, monitoring or diagnosing increase, such former luxuries as graphical presentation 
10 and portability of the interface from platform to platform have migrated from the category of 
luxuries to that of necessities. It is well known that information presented graphically is more 
quickly and easily assimilated than the same information presented as text. It is also well known 
that a consistent user interface presented by a variety of platforms is more likely to be understood 
and properly used than unique proprietary user interfaces presented by each individual platform. 
1 5 Therefore, portable GUIs with low run-time resource requirements are highly desirable. 

With the growing popularity and expansion of the Internet, one extremely popular public 
network for communications between computer systems, and development of the World-Wide- 
Web communication and presentation model, a new paradigm for communication of information 
has emerged. 

20 The World- Wide- Web and similar private architectures such as internal corporate LANs, 

provide a "web" of interconnected document objects. On the World- Wide- Web, these document 
objects are located on various sites on the global Internet. The World-Wide- Web is also 
described in "The World-Wide Web, " by T. Berners-Lee, R. Cailliau, A. Luotonen, H. F. 
Nielsen, and A. Secret, Communications of the ACM . 37 (8), pp. 76-82, August 1994, and in 

25 "World Wide Web: The Information Universe," by Berners-Lee, T., et al., in Electronic 

Networking: Research . Applications and Policy . Vol. 1, No. 2, Meckler, Westport, Conn., Spring 
1992. On the Internet, the World- Wide- Web is a collection of documents (i.e., content), client 
software (i.e., browsers) and server software (i.e., servers) which cooperate to present and receive 
information from users. The World-Wide- Web is also used to connect users through the content 

30 to a variety of databases and services from which information may be obtained. However, except 
as explained below, the World-Wide- Web is based principally on static information contained in 
the content documents available to the browsers through the servers. Such a limitation would 
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make the World-Wide-Web paradigm useless as a GUI which must present dynamic information 
generated by a device or application. 

The World-Wide- Web communications paradigm is based on a conventional client-server 
model. Content is held in documents accessible to servers. Clients can request, through an 
5 interconnect system, documents which are then served to the clients through the interconnect 
system. The client software is responsible for interpreting the contents of the document served, 
if necessary. 

Among the types of document objects in a "web" are documents and scripts. Documents 
in the World-Wide- Web may contain text, images, video, sound or other information sought to 

10 be presented, in undetermined formats known to browsers or extensions used with browsers. The 
presentation obtained or other actions performed when a browser requests a document from a 
server is usually determined by text contained in a document which is written in Hypertext Mark- 
up Language (HTML). HTML is described in HvperText Markup Language Specification - 2.0 . 
by T. Berners-Lee and D. Connolly, RFC 1866, proposed standard, November 1995, and in 

15 M World Wide Web & HTML," by Douglas C. McArthur, in Dr. Dohbs Journal . December 1994, 
pp. 18-20, 22, 24, 26 and 86. HTML documents stored as such are generally static, that is, the 
contents do not change over time except when the document is manually modified. Scripts are 
programs that can generate HTML documents when executed. 

HTML is one of a family of computer languages referred to as mark-up languages. 

20 Mark-up languages are computer languages which describe how to display, print, etc. a text 

document in a device-independent way. The description takes the form of textual tags indicating 
a format to be applied or other action to be taken relative to document text. The tags are usually 
unique character strings having defined meanings in the mark-up language. Tags are described 
in greater detail, below. 

25 HTML is used in the World-Wide-Web because it is designed for writing hypertext 

documents. The formal definition is that HTML documents are Standard Generalized Markup 
Language (SGML) documents that conform to a particular Document Type Definition (DTD). 
An HTML document includes a hierarchical set of markup elements, where most elements have 
a start tag, followed by content, followed by an end tag. The content is a combination of text and 

30 nested markup elements. Tags are enclosed in angle brackets ('<' and '>') and indicate how the 
document is structured and how to display the document, as well as destinations and labels for 
hypertext links. There are tags for markup elements such as titles, headers, text attributes such as 
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bold and italic, lists, paragraph boundaries, links to other documents or other parts of the same 
document, in-line graphic images, and many other features. 
For example, here are several lines of HTML: 

Some words are <B>bold</B>, others are <I>italic</I>. Here we start a new 
5 paragraph. <P>Here's a link to 

the <A HREF= n http;//www. agranat. conV'> Agranat Systems, Inc.</A> home 
page. 

This sample document is a hypertext document because it contains a "link" to another 
10 document, as provided by the M HREF=." The format of this link will be described below. A 
hypertext document may also have a link to other parts of the same document. Linked 
documents may generally be located anywhere on the Internet. When a user is viewing the 
document using a client program called a Web browser (described below), the links are displayed 
as highlighted words or phrases. For example, using a Web browser, the sample document above 
15 would be displayed on the user's screen as follows: 

Some words are bold, others are italic. Here we start a new paragraph. 
Here's a link to Agranat Systems, Inc. home page. 
In the Web browser, the link may be selected, for example by clicking on the highlighted 
area with a mouse. Selecting a link will cause the associated document to be displayed. Thus, 
20 clicking on the highlighted text "Agranat Systems, Inc." would display that home page. 

Although a browser can be used to directly request images, video, sound, etc. from a 
server, more usually an HTML document which controls the presentation of information served 
to the browser by the server is requested. However, except as noted below, the contents of an 
HTML file are static, i.e., the browser can only present a passive snapshot of the contents at the 
25 time the document is served. In order to present dynamic information, i.e., generated by an 
application or device, or obtain from the user data which has been inserted into an HTML- 
generated form, conventional World- Wide- Web servers use a "raw" interface, such as the 
common gateway interface (CGI), explained below. HTML provides no mechanism for 
presenting dynamic information generated by an application or device, except through a raw 
30 interface, such as the CGI. Regarding obtaining data from the user for use by the application or 
device, although standard HTML provides a set of tags which implement a convenient 
mechanism for serving interactive forms to the browser, complete with text fields, check boxes 
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and pull-down menus, the CGI must be used to process submitted forms. Form processing is 
important to remote control, management, configuration, monitoring and diagnosing applications 
because forms processing is a convenient way to configure an application according to user input 
using the World- Wide- Web communications model. But, form processing using a CGI is 
5 extremely complex, as will be seen below, requiring an application designer to learn and 
implement an unfamiliar interface. A CGI is therefore not a suitable interface for rapid 
development and prototyping of new GUI capabilities. Moreover, a developer must then master 
a native application source code language (e.g., C, C++, etc.), HTML and the CGI, in order to 
develop a complete application along with its user interface. 

10 Models of the World- Wide- Web communications paradigm for static content and 

dynamic content are shown in Figs. 14 and 15, respectively. As shown in Fig. 14, a browser 
1401 makes a connection 1402 with a server 1403, which serves static content 1405 from a 
storage device 1407 to the browser 1401 . In the case of dynamic content shown in Fig. 1 5, the 
server 1403 passes control of the connection 1402 with the browser 1401 to an application 150L 

15 through the CGI 1503. The application 1501 must maintain the connection 1402 with the 

browser 1401 and must pass control back to the server 1403 when service of the request which 
included dynamic content is complete. Furthermore, during service of a request which includes 
dynamic content, the application 1501 is responsible for functions normally performed by the 
server 1403, including maintaining the connection 1402 with the browser 1401, generating 

20 headers in the server/browser transport protocol, generating all of the static and dynamic content 
elements, and parsing any form data returned by the user. Since use of the CGI 1 503 or other 
raw interface forces the application designer to do all of this work, applications 1501 to which 
forms are submitted are necessarily complex. 

In order to provide dynamic content to a browser, the World-Wide- Web has also evolved 

25 to include Java and other client side scripting languages, as well as some server side scripting 
languages. However, these languages are interpreted by an interpreter built into the browser 
1401 or server 1403, slowing down the presentation of information so generated. In the case of 
client side scripting, the script does not have any direct access to the application or to application 
specific information. Therefore, in order to generate or receive application specific information 

30 using client side scripting, the CGI 1503 or other raw interface must still be used. In the case of 
server side scripting, the server 1403 must parse the content as it is served, looking for a script to 
be interpreted. The access which a script' has to the application is limited by the definition of the 
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scripting language, rather than by an application software interface designed by the application 
designer. 

A server side script is an executable program, or a set of commands stored in a file, that 
can be run by a server program to produce an HTML document that is then returned to the Web 
5 browser. Typical script actions include running library routines or other applications to get 
information from a file, a database or a device, or initiating a request to get information from 
another machine, or retrieving a document corresponding to a selected hypertext link. A script 
may be run on the Web server when, for example, the end user selects a particular hypertext link 
in the Web browser, or submits an HTML form request. Scripts are usually written in an 

10 interpreted language such as Basic, Practical Extraction and Report Language (Perl) or Tool 
Control Language (Tel) or one of the Unix operating system shell languages, but they also may 
be written in programming languages such as the "C" programming language and then compiled 
into an executable program. Programming in Tel is described in more detail in Tel and the Tk 
Toolkit , by John K. Ousterhout, Addison- Wesley, Reading, MA, USA, 1994. Perl is described 

15 in more detail in Pro gramming Perl , by Larry Wall and Randal L. Schwartz. O'Reilly & 
Associates, Inc., Sebastopol. CA, USA, 1992. 

Each document object in a web has an identifier called a Universal Resource Identifier 
(URI). These identifiers are described in more detail in T. Berners-Lee, " Universal Resource 
Identifiers in World-Wide- Web: A Unifying Syntax for the Expression of Names and Addresses 

20 of Objects on the Network as used in the World-Wide Web ." RFC 1630, CERN, June 1994: and 
T. Bemers-Lee, L. Masinter. and M. McCahill, " Uniform Resource Locators (URLV RFC 1738. 
CERN, Xerox PARC, University of Minnesota, December 1994. A URI allows any object on 
the Internet to be referred to by name or address, such as in a link in an HTML document as 
shown above. There are two types of URIs: a Universal Resource Name (URN) and a Uniform 

25 Resource Locator (URL). A URN references an object by name within a given name space. The 
Internet community has not yet fully defined the syntax and usage of URNs. A URL references 
an object by defining an access algorithm using network protocols. An example URL is 
"http://www.agranat.com " A URL has the syntax "scheme: scheme_specific_components" where 
"scheme" identifies the access protocol (such as HTTP, FTP or GOPHER). For a 

30 scheme of HTTP, the URL may be of the form ,f http://host:port/path?search M 

where 

"host" is the Internet domain name of the machine that supports the protocol; 
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"port" is the iransmission control protocol (TCP) port number of the appropriate 
server (if different from the default); 

"path" is a scheme-specific identification of the object; and 
"search" contains optional parameters for querying the content of the object. 
5 URLs are also used by web servers and browsers on private computer systems or networks and 
not just the World- Wide- Web. 

A site, i.e. an organization having a computer connected to a network, that wishes to 
make documents available to network users is called a "Web site" and must run a "Web server" 
program to provide access to the documents. A Web server program is a computer program that 
10 allows a computer on the network to make documents available to the rest of the World-Wide- 
Web or a private web. The documents are often hypertext documents in the HTML language, 
but may be other types of document objects as welK as well as images, audio and video 
information. The information that is managed by the Web server includes hypertext documents 
that are stored on the server or are dynamically generated by scripts on the Web server. Several 
15 Web server software packages exist, such as the Conseil Europeen pour la Recherche Nucleaire 
(CERN, the European Laboratory for Particle Physics) server or the National Center for 
Supercomputing Applications (NCSA) server. Web servers have been implemented for several 
different platforms, including the Sun Sparc 1 1 workstation running the Unix operating system, 
and personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
20 operating system and the Microsoft® Windows™ operating environment. 

Web servers also have a standard interface for running external programs, called the 
Common Gateway Interface (CGI). CGI is described in more detail in How To Set Up And 
Maintain A Web Site , by Lincoln D. Stein, Addison- Wesley, August 1995. A gateway is a 
program that handles incoming information requests and returns the appropriate document or 
25 generates a document dynamically. For example, a gateway might receive queries, look up the 
answer in an SQL database, and translate the response into a page of HTML so that the server 
can send the result to the client. A gateway program may be written in a language such as "C" or 
in a scripting language such as Perl or Tel or one of the Unix operating system shell languages. 
The CGI standard specifies how the script or application receives input and parameters, and 
30 specifies how any output should be formatted and returned to the server. 

A user (typically using a machine other than the machine used by the Web server) that 
wishes to access documents available on the network at a Web site must run a client program 
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called a "Web browser/' The browser program allows the user to retrieve and display documents 
from Web servers. Some of the popular Web browser programs are: the Navigator browser from 
NetScape Communications Corp., of Mountain View, California; the Mosaic browser from the 
National Center for Supercomputing Applications (NCSA); the WinWeb browser, from 
5 Microelectronics and Computer Technology Corp. of Austin, Texas; and the Internet Explorer, 
from Microsoft Corporation of Redmond, Washington. Browsers exist for many platforms, 
including personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
operating system and the Microsoft® Windows™ environment, and Apple Macintosh personal 
computers. 

10 The Web server and the Web browser communicate using the Hypertext Transfer 

Protocol (HTTP) message protocol and the underlying transmission control protocol/internet 
protocol (TCP/IP) data transport protocol of the Internet. HTTP is described in Hypertext 
Transfer Protocol - HTTP/ 1.0 . by T. Berners-Lee, R. T. Fielding, H. Frystyk Nielsen, Internet 
Draft Document, October 14, 1995, and is currently in the standardization process. At this 

15 writing, the latest version is found in RFC Z068 which is a draft definition of HTTP/ 1.1. In 
HTTP, the Web browser establishes a connection to a Web server and sends an HTTP request 
message to the server. In response to an HTTP request message, the Web server checks for 
authorization, performs any requested action and returns an HTTP response message containing 
an HTML document resulting from the requested action, or an error message. The returned 

20 HTML document may simply be a file stored on the Web server, or it may be created 

dynamically using a script called in response to the HTTP request message. For instance, to 
retrieve a document, a Web browser sends an HTTP request message to the indicated Web 
server, requesting a document by its URL. The Web server then retrieves the document and 
returns it in an HTTP response message to the Web browser. If the document has hypertext 

25 links, then the user may again select a link to request that a new document be retrieved and 

displayed. As another example, a user may fill in a form requesting a database search, the Web 
browser will send an HTTP request message to the Web server including the name of the 
database to be searched and the search parameters and the URL of the search script. The Web 
server calls a program or script, passing in the search parameters. The program examines the 

30 parameters and attempts to answer the query, perhaps by sending a query to a database interface. 
When the program receives the results of the query, it constructs an HTML document that is 
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returned to the Web server, which then sends it to the Web browser in an HTTP response 
message. 

Request messages in HTTP contain a "method name" indicating the type of action to be 
performed by the server, a URL indicating a target object (either document or script) on the Web 
server, and other control information. Response messages contain a status line, server 
information, and possible data content. The Multipurpose Internet Mail Extensions (MIME) are 
a standardized way for describing the content of messages that are passed over a network. HTTP 
request and response messages use MIME header lines to indicate the format of the message. 
MIME is described in more detail in MIME ^Multipurpose Internet Mail Extensions): 
Mechanisms for Specifying and Describing the F ormat of Internet Message Bodies, Internet RFC 
1341, June 1992. 

The request methods defined in the HTTP/1 . 1 protocol include GET, POST. PUT, 
HEAD, DELETE, LINK, and UNLINK. PUT, DELETE, LINK and UNLINK are less 
commonly used. The request methods expected to be defined in the final version of the 
HTTP/1.1 protocol include GET, POST, PUT, HEAD, DELETE, OPTIONS and TRACE. 
DELETE, PUT, OPTIONS and TRACE are expected to be less commonly used. All of the 
methods are described in more detail in the HTTP/1 .0 and HTTP/1 . 1 specifications cited above. 

Finally, a device or application using conventional World- Wide- Web technology must 
have access to a server. Conventional servers are large software packages which run on 
relatively large, resource-rich computer systems. These systems are resource-rich in terms of 
processing speed and power, long-term storage capacity, short-term storage capacity and 
operating system facilities. Conventional servers take advantage of these resources, for example, 
in how they store content source documents. For high-speed, convenient access to content, it is 
conventionally stored in a directory tree of bulky ASCII text flies. Therefore, conventional 
World- Wide- Web technology cannot be used to implement a GUI in a relatively small, 
inexpensive, resource-poor device or application. 

The combination of the Web server and Web browser communicating using an HTTP 
protocol over a computer network is referred to herein as the World-Wide- Web communications 
paradigm. 
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SUMMARY OF THE INVENTION 

It is therefore an object of the present invention to provide an improved graphical user 
interface (GUI) for use in connection with remote control, management, configuration, 
monitoring and diagnosing functions embedded in applications, devices and equipment. 
5 According to one aspect of the invention, there is provided a method for providing a 

graphical user interface having dynamic elements. The method begins by defining elements of 
the graphical user interface in at least one text document written in a mark-up language. Next, 
the method defines including at a location in the document a code tag containing a segment of 
application source code. The text document is then served to a client which interprets the rnark- 
10 up language; and when the location is encountered, the client is served a sequence of characters 
derived from a result of executing a sequence of instructions represented by the segment of 
application source code. An embodiment of code tags illustrating their use is described in detail, 
later. 

According to another aspect of the invention, there is another method for providing a 

1 5 graphical user interface having dynamic elements. This method also defines elements of the 

graphical user interface in at least one text document written in a mark-up language. Included in 
the document is a string identified by prototype tags. The text document is served to a 
prototyping client which interprets the mark-up language but does not recognize and does not 
display the prototype tag, but does display the string. An embodiment of prototype tags 

20 illustrating their use is described in detail, later. 

According to yet another aspect of the invention, there is yet another method for 
providing a graphical user interface having dynamic elements. Elements of the graphical user 
interface are defined in at least one text document written in a mark-up language. Included at a 
location in the document is a code tag containing a segment of application source code. Also 

25 included in the document is a string identified by prototype tags. The text document is compiled 
into a content source, which is subsequently decompiled into a replica of the text document. The 
replica of the text document is served to a client which interprets the mark-up language; and 
when the location is encountered in the replica, the client is served a character stream generated 
by executing the segment of application source code. 

30 Yet another aspect of the invention is a software product recorded on a medium. The 

software product includes a mark-up language compiler which can compile a mark-up language 
document into a data structure in a native application programming language, the compiler 
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recognizing one or more code tags which designate included text as a segment of application 
source code to be saved in a file for compilation by a compiler of the native application 
programming language. 

Another aspect of the invention is a method for providing a graphical user interface 
5 having displayed forms for entry of data. The steps of this method include defining elements of 
the graphical user interface in at least one text document written in a mark-up language: naming 
in the document a data item requested of a user and used by an application written in a native 
application programming language; and compiling the text document into a content source 
including a data structure definition in the native application programming language for the 

10 named data item. 

Yet another aspect of the invention may be practiced in a computer-based apparatus for 
developing a graphical user interface for an application, the apparatus including an editor which 
can manipulate a document written in a mark-up language and a viewer which can display a 
document written in the mark-up language. The apparatus further includes a mark-up language 

15 compiler which recognizes a code tag containing a source code fragment in a native application 
source code language, the code tag not otherwise part of the mark-up language, the compiler 
producing as an output a representation in the native application source code language of the 
document, including a copy of the source code fragment. 

In accordance with another aspect of the invention, there is a method for developing and 

20 prototyping graphic user interfaces for an application. The method includes accessing an HTML 
file, encapsulating portions of said HTML and entering source code therein, producing a source 
module from said HTML with encapsulated portions, producing source code for a server, and 
cross compiling and linking said application, said source code module and said server thereby 
producing executable object code. 

25 The invention, according to another aspect thereof, may be a data structure fixed in a 

computer readable medium, the data structure for use in a computer system including a client and 
a server in communication with each other. The data structure includes cross-compiled, stored 
and linked, HTML files with encapsulated portions containing executable code associated with 
said application, server code, and application code, wherein said executable code is run when the 

30 HTML file is served thereby providing real time dynamic data associated with said application. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

In the drawings, in which like reference numerals denote like elements: 
Fig. 1 is a block diagram of that aspect of the invention relating to development systems; 
Fig. 2 is a block diagram of that aspect of the invention relating to an embedded system: 
5 Fig. 3 is an HTML text fragment illustrating the use of an EMWEBSTRING tag; 

Fig. 4 is another HTML text fragment illustrating another use of an EMWEB_STRING 

tag; 

Fig. 5 is an HTML text fragment illustrating the use of an EMWEBJNCLUDE tag; 
Fig. 6 is another HTML text fragment illustrating another use of an EMWEBFNCLUDE 

10 tag; 

Fig. 7 is an HTML text fragment showing a use of the EMWEB_ITERATE attribute in 
connection with an EMWEB_STRING tag; 

Fig. 8 is an HTML text fragment showing a use of the EMWEBITERATE attribute in 
connection with an EMWEBJNCLUDE tag; 
15 Fig. 9 is an example of forms processing showing the relationship between the HTML 

source code for the form and the form output produced; 

Fig. 10 is a block diagram of the data structure which defines the header for the data.dat 
archive file; 

Fig. 1 1 is a state diagram of an embedded system illustrating dynamic content processing; 
20 Fig. 12 is a state diagram of an embedded system illustrating forms processing; 

Fig. 13 is a state diagram of an embedded system illustrating suspend/resume processing; 

Fig. 14 is a block diagram illustrating conventional World- Wide- Web communication of 
static content between a server and a client; and 

Fig. 15 is a block diagram illustrating conventional World- Wide- Web communication of 
25 dynamic content between a server and a client, 

DE T A ILED PE3CRIPTIQN 

The present invention will be better understood upon reading the following detailed 
description in connection with the figures to which it refers. 
30 Embodiments of various aspects of the invention are now described. First, a development 

environment is described in which application development and graphical user interface 
development are closely linked, yet require a low level of complexity compared to conventional 
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devclopment of an application and GUI. Second, an operating environment is described in which 
the application, a server and GUI are tightly coupled, compact and flexible. In the described 
system a GUI having portability, low run-time resource requirements and using any of a wide 
variety of systems available to a user as a universal front end, i.e. the point of contact with the 
5 user is software with which the user is already familiar. 



Development Environment 

Fig. 1 illustrates a development environment according to one aspect of the invention. 
Not all components of the environment are shown, but those shown are identified in the 

1 0 following discussion. 

Conventionally, an application development environment may include a source code 
editor, a compiler 101, a linker and a run-time environment in which to test and debug the 
application. It is expected that development environments in accordance with the invention 
include those components of a conventional development environment which a developer may 

1 5 find useful for developing an application. In the case of embedded applications, i.e., applications 
included within a device or larger application, the run-time environment includes the device or 
application in which the application is embedded, or a simulation or emulation thereof. 

The compiler 101 takes source code 103 generated using the source code editor or from 
other sources and produces object code 105, which is later linked to form the executable image. 

20 In addition to the conventional elements noted above, the described embodiment of a 

development environment according to the invention includes an HTML compiler 107 whose 
output 109 is in the source code language of the application under development. In addition, the 
development environment may include an HTML editor, an HTTP-compatible server for 
communicating with client software, i.e., browsers, and an HTTP-compatible browser. 

25 The HTML editor is used to create and edit HTML documents 1 1 1 which define the look 

and feel of a GUI for the application. Numerous tools are now available for performing this task 
while requiring a minimal knowledge or no knowledge of HTML, for example, Microsoft^ Front 
Page™. It is preferred that the HTML editor used permit entry of non-standard tags into the 
HTML document. 

30 As will be seen in further detail, below, the server and browser are used to test a 

prototype GUI before it is fully integrated with the application or in the absence of the 
application. The browser should be capable of making a connection with the server using, for 
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example, a conventional connection protocol such as TCP/IP, as shown and described above in 
connection with Fig. 14. Other protocols or direct connections can also be used, as would be 
understood by those skilled in this art. While the browser and the server may be connected 
through a network such as the Internet, they need not be. For example, the server and client may 
5 run and connect on a single computer system. 

Application development proceeds substantially in a conventional manner as known to 
software developers. The application development should include the design of a software 
interface through which data will be communicated into and out of the application. However, the 
software interface is not a GUI. Rather, the interface merely defines how other software can 

10 communicate with the application. For example, the interface may be a collection of function 
calls and global symbols which other software can use to communicate with the application. The 
application should be written in a high level language such as C, C++, etc. The application can 
be tested by compiling and linking it with prototype code that provides or receives information 
through the software interface, exercising those features of the application. 

15 Meanwhile, a GUI for the application is designed as follows. The look and feel of the 

GUI are developed using the HTML editor, server and browser to create a set of content source 
documents 1 1 1 including at least one HTML document, which together define the look and feel 
of the GUI. This aspect of GUI development is conventional, proceeding as though the 
developer were developing a World- Wide- Web site. 

20 At locations in one or more HTML documents where data obtained from the application 

is to be displayed, the author includes special tags, explained further below, which allow the 
HTML document to obtain from the application the required data, using the application software 
interface. 

The content source documents 1 1 1 are stored conventionally in the form of one or more 
25 directory trees 113. The directory tree 113 containing the content which defines the GUI is then 
compiled using the HTML compiler 107, to produce an application source code language output 
109 representing the content source documents in the directory tree. The source code elements 
109 produced from the content source documents 111 in the directory tree 113, source code for 
an HTTP compatible server (not shown) and the application source code 103 are compiled into 
30 object code 105 and linked to form an executable image. The server may be supplied in the form 
of an object code library, ready for linking into the finished executable image. The executable 
image thus formed fully integrates the graphical user interface defined using familiar tools of 
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World-Wide-Web content development with the control and other functions defined using 
conventional application development tools. 

In order to successfully perform the integration described above, the HTML compiler 107 
of the described embodiment of the invention, the EmWeb™/compiler 107, recognizes a number 
5 of special extensions to HTML. The HTML extensions implemented by the EmWeb™/compiler 
107, embodying aspects of the invention are described in detail in Table A, Section 3.2. Several 
of these extensions are described briefly here, to aid in understanding the invention. 

The EMWEB_STRING tag is an extension of HTML used to encapsulate a fragment of 
source code in the HTML document. The source code will be executed by a system in which the 

10 application is embedded when the document is served to a browser (usually running on another 
system) and the location of the EMWEB^STRTNG tag is reached. The source code returns a 
character string that is inserted as is into the document at the location of the EMWEB STRJNG 
tag. Examples of the use of the EMWEB_STRING tag are shown in Figs. 3 and 4. 

In the example of Fig. 3, the EMWEBSTRING tag 301 first defines using "C= M a 

15 boundary character 303 used to define the end 305 of the included source code. Immediately 
following the boundary character definition is a fragment of C code 307 which returns a pointer 
to a string representing one of three fax states. When served by an embedded application, this 
example HTML produces the text "NetFax State:" followed by "Sending", "Receiving" or "Idle", 
depending on the value of the symbol GlobalFaxState. 

20 The example of Fig. 4 shows the use of EMWEB_STRING to output typed data whose 

type is defined by an attribute, EMWEBTYPE 401 . The EmWeb™/compiler uses this attribute 
401 toproduce a source code output routine which converts the typed data found at the address 
returned 403 into a string for serving at the proper location in the document. 

A similar function is performed by the HTML extension, the EMWEB_INCLUDE tag. 

25 Using this tag, standard parts of a GUI such as headers and footers common to multiple pages or 
windows of information need only be stored once. Header and footer files are referred to using 
the EMWEB_INCLUDE tag which inserts them at the location in each HTML content document 
where the tag is placed. In the described embodiment of the invention, the contents of the 
EMWEB_INCLUDE tag must resolve to a relative or absolute path name within the local 

30 directory tree of content. This can be done by specifying a local Universal Resource Locator 
(URL), which is how resources are located in the World-Wide- Web communications paradigm, 
or by including source code which returns a string representing such a local URL. An absolute 
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local URL takes the form *7path/filename'\ where "/path" is the full path from the root of the 
directory' tree to the directory in which the file is located. A relative URL defines the location of 
a file relative to the directory in which the current, i.e., base, document is located and takes the 
form ^path/filename". While the described embodiment requires resolution of the 
5 EMWEB_INCLUDE tag to a local URL, the invention is not so limited. In alternate 
embodiments, local and external URLs may be permitted or other limitations imposed. 
Examples of the use of the EMWEB_INCLUDE tag are shown in Figs. 5 and 6. 

In the example of Fig. 5, a COMPONENT attribute 501 in an EMWEBJNCLUDE tag 
simply defines a local URL 503. 
10 In the more elaborate example of Fig. 6, a fragment of source code 601 which produces a 

local URL 603 upon a defined condition 605 is used to generate a local URL at run time. 

The results to be returned by an EMWEBJSTRING or EMWEB_rNCLUDE tag can also 
be built up iteratively using repeated calls to the included source code. This is done using the 
EMWEBITERATE attribute, yet another extension to HTML. Examples of the use of 
15 EM WEB ITERATE are shown in Figs. 7 and 8. 

Fig. 7 shows an example of the EMWEB_ITERATE attribute 701 used in connection 
with the EMWEBSTRING tag 703. The fragment of code 705 is executed repeatedly until a 
NULL is returned. Thus, this HTML repeatedly executes the C source code fragment to display 
the tray status of all trays in a system. 
20 Similarly, in Fig. 8, EMWEBJNCLUDE 801 and EMWEBJTERATE 803 are used to 

build a table of features for which content from other URLs 805 are to be displayed. When the 
table is complete, a NULL is returned 807, terminating the iterations. 

Since the extensions to HTML described above allow the encapsulation of source code 
within an HTML document a mechanism with which to provide the encapsulated source code 
25 with required global definitions, header files, external declarations, etc. is also provided in the 
form of an EMWEB HEAD tag. The EMWEB_HEAD tag specifies a source code component 
to be inserted in the source code output of the EmWeb™/compiler, outside of any defined 
function. Although it is preferred that the EMWEB_HEAD tag appears in the HTML file 
header, it may appear anywhere. The code generated by an EMWEB_HEAD tag is placed before 
30 any functions or other code defined within the HTML content source documents. 

As indicated above, the GUI may be prototyped using a conventional server and browser 
(see Fig. 14) to preview the HTML documents comprising the GUI. Therefore, it may be useful 
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to provide static content with which to preview the page, at locations where dynamic content will 
appear during use, but which does not appear in the compiled document. For example, it may be 
useful to include a prototyping value for content which is otherwise provided using the 
EMWEBSTRJNG tag mechanism. Therefore, another extension to HTML recognized by the 
5 EmWeb™/compiler is the EMWEBPROTO begin 309 and end 31 1 tags, as shown in Fig. 3. 
The EmWeb™/compiler removes these tags and everything between them when compiling the 
document, but the tags are ignored and the text between them is interpreted normally by a 
conventional browser viewing the HTML document either directly or via a conventional server. 
Conventional browsers recognize the tag due to its special syntax, e.g., being enclosed in and 

10 ">'\ but are designed to ignore and not display any tag for which the browser does not have a 
definition. All EmWeb™/compiler HTML extensions are thus skipped over by conventional 
browsers. Thus, in the example of Fig. 3, the prototype page displays "NetFax State: Sending" 
Fig. 4 shows a similar use of EMWEBPROTO tags. 

Handling of HTML forms by the EmWeb™/compiler is now described in connection 

15 with Fig. 9. As seen in Fig. 9, an HTML form is defined substantially conventionally. Names 
used in the form are used in constructing symbol names used in the output source code produced 
by the EmWeb™/compiler. Therefore names should be valid symbol names in the source code 
language. 

Each element of a form definition is translated by the EmWeb™/compiler into a part of a 
20 corresponding data structure defined for that form. Forms data is moved into and out of the 
application by changing values of items in the data structure. 

Turning now to the example in Fig. 9, the relationship between the illustrated HTML 
form definition and the corresponding data structure is described. The form is given a unique 
name, using an EMWEB_NAME attribute in a FORM tag. The form name becomes part of the 
25 structure name, for easy reference and uniqueness. The form name will also be used to generate 
function names for functions which are called when the form is served and when the form is 
submitted. 

The structure generated is itself composed of two structures. The first holds values of 
each dynamic element of the form. The second holds a status flag indicating the status of the 
30 contents of a corresponding value. Thus, in the example of Fig. 9, a structure to hold values and 
status for the sysName INPUT and the Logging SELECTion is created. The value of sysName is 
a character string, while Logging is an enumerated type. 
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Two function prototypes are also generated. The actions to be performed by these 
functions must be defined by the developer. The Serve function is called when the form is 
served and can be used to supply default values, for example. The Submit function is called 
when the form is submitted, to update values in the data structure, for example. 

5 Currently, EmWeb™/compiler supports TEXT, PASSWORD, CHECKBOX, RADIO, 

IMAGE, HIDDEN, SUBMIT, RESET, SELECT and OPTION input fields. For detailed 
descriptions, see Table A, Section 3.2.5. In addition, the EmWeb™/compiler supports 4fc typing M 
of TEXT input field data. That is, the EMWEBJTYPE attribute may be used to define a TEXT 
input field to contain various kinds of integers, a dotted IP address (i.e., an address of the form 

10 000.000.000.000), various other address formats, etc. A mapping of EMWEBJTYPE values to 
C language types is formed in the table in Table A, Section 3.2.5.3. 

The EmWeb™/compiler has been described in terms of a generic application source code 
language. The current commercial embodiment of the EmWeb™/compiler assumes the 
application source code language to be C or a superset thereof, e.g., C++. However, the 

1 5 functionality described can be generalized to any application source code language which may be 
preferred for a particular application purpose. However, in order to more fully understand how 
the EmWeb™/compiler and HTML extensions described above cooperate to permit integration 
of an HTML defined GUI with an application defined in an application source code, it will be 
assumed, without loss of generality, that the application source code language is C or a superset 

20 thereof. 

The EmWeb™/compiler produces a set of output files including a data.dat file containing 
the fixed data of a content archive, a code.c file containing the generated source code portions of 
an archive including portions defined in EMWEB_STRING, EMWEB JNCLUDE and 
EMWEB_HEAD tags and other source code generated by the EmWeb™/compiler, as well as 
25 proto.h and stubs.c files containing the definitions of C functions used for forms processing. The 
structure of these files is now described in connection with the data structure illustrated in Fig. 
10. 

The content archive file data_dat has a header structure as illustrated in Fig. 10. The data 
structure is accessed through an archive header 1001 which is a table of offsets or pointers to 
* 30 other parts of the archive. For example, there is a pointer 1001a to a compression dictionary 
1003 for archives which include compressed documents. There is also a pointer 1001b to a 
linked list of document headers 1005, 1007 and 1009. Each document header 1005, 1007 and 
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1009 is a table of offsets or pointers to various components of the document. For example, the 
document header includes a pointer 1005a to the URL 1011 to which the document corresponds. 
There is also a pointer 1005h to a field 1013 giving the Multipurpose Internet Mail Extension 
(MIME) type of the document. There are pointers 1005c and 1005d respectively to header nodes 
5 1015 and document nodes 1017, explained further below. Finally, there is a pointer 1005e to a 
block of static compressed or uncompressed data 1019 representing the static portions of the 
document. 

The static data does not include any Em Web™ tags, i.e., the extensions to HTML 
discussed above and defined in detail in Table A. Rather, information concerning any Em Web™ 

10 tags used in the document appears in the document nodes structure. 

Each Em Web™ tag employed in a document is represented in that document's document 
nodes structure as follows. The location of the Em Web™ tag within an uncompressed data 
block or an uncompressed copy of a compressed data block is represented by an offset 1 01 7a 
relative to the uncompressed data. The type of tag is indicated by a type flag 1017b. A node 

15 may include a flag which indicates any attributes associated with the tag represented. For 

example, a node for a tag of type EMWEB STRING may include a flag indicating the attribute 
EMWEB ITERATE. Finally, nodes include an index 1017c. In nodes defining form elements, 
the index holds a form number and element number uniquely identifying the element and form 
within the document. In nodes defining EMWEB_STRING tags, the index is a reference to the 

20 instance of source code which should be executed at that point. As such, the index may be 

evaluated in an expression of a "switch" statement in C, where each controlled statement of the 
"switch" statement is one source code fragment from one EMWEB_STRING instance. 
Alternatively, the index may be a pointer or index into a table of source code fragments from 
EMWEB_STRING tags, which have been encapsulated as private functions. 

25 The data structure defined above provides a convenient way of transferring control as a 

document containing dynamic content is served. When a document is requested, the list of 
document nodes is obtained, to determine at what points control must be transferred to code 
segments which had been defined in the HTML source document. The document is then served 
using the data block defining the static elements of the document, until each document node is 

30 encountered. When each document node is encountered, control is transferred to the appropriate 
code segment. After the code segment completes execution, the static content which follows is 
served until the offset of the next document nocje is encountered. 
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Header nodes permit the storage of document meta information, not otherwise handled, 
such as content language, e.g., English, German, etc., cookie control, cache control or an e-tag 
giving a unique version number for a document, for example a 30-bit CRC value computed for 
the document. By avoiding having to put this information in the header of each document, 
5 significant space can be saved in the archive because not all documents require this information. 
Therefore, header nodes need only be stored for documents using this information. 

The data structure which represents the archive of content used by the 
EmWeb™/compiler embodiment of the invention is defined by the C source code contained in 
Table B. 

10 

Run-time Environment 

Aspects of the invention related to the run-time environment and server are embodied in 
the EmWeb™/server as described in detail in Table A, Section 4. 

To a conventional browser implementing HTTP, the EmWeb™/server behaves 
15 conventionally. However, as shown in Fig. 2, the EmWeb™/server is fully integrated with the 
application and therefore has access to information about the application and device in which it is 
embedded. 

Operation of the EmWeb™/server with respect to presentation of dynamic content is now 
described in connection with Fig. 1 1 . 

20 Before the operations shown in Fig. 1 1 commence, one or more archives are loaded by 

the server. When each archive is loaded, the server generates a hash table using the archive 
header data structure to make documents easy to locate using URLs. 

First, the browser requests a document at a specified URL, using HTTP 1101. The 
EmWeb™/server acknowledges the request, in the conventional manner 1 103. The 

25 EmWeb™/server then uses the hash table of the archive header to locate the document requested 
and begin serving static data from the document 1 105. When a document node is encountered, 
for example denoting the presence of an EMWEB_STRING tag, then the server passes control to 
the code fragment 1 107a of the application which had been included in the EMWEB_STRING 
tag 1 107. When the code fragment completes execution and returns some dynamic data 1 109, 

30 the Em Web™/server then serves that dynamic data to the browser 1111. The EmWeb™/server 
then resumes serving any static data remaining in the document 1113. This process continues 
until the entire document, including all dynamic elements has been served. 
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Run-time serving and submission of forms is now described in connection with Fig. 12. 
A brief inspection of Fig. 12 will show that form service and submission proceeds along similar 
lines to those for serving dynamic content. 

The browser first requests a URL using HTTP 1201. When, during service of the 
5 contents of the URL requested, a form is encountered, service of the form and any HTML- 
defined default values commences normally. The EmWeb™/server then makes a call to the 
application code 1203 to run a function 1203a which may substitute alternate default values 1205 
with which to fill in the form. The document served then is made to include the default values 
defined by the static HTML as modified by the application software 1207. Later, when the user 

10 submits the form, the browser performs a POST to the URL using HTTP 1209. The form data is 
returned to the application by a call 1211 made by the EmWeb™/server to a function 1211 which 
inserts the data returned in the form into the data structure defined therefor within the application 
code. The response 1213 is then served back to the browser 1215. 

Finally, it should be noted that there may be times when a request for dynamic content 

15 may require extended processing, unacceptably holding up or slowing down other operations 

performed by the application. In order to avoid such problems, the EmWeb™/server implements 
a suspend/resume protocol, as follows. The suspend/resume protocol exists within a context of a 
scheduler maintained and operated by the server. The scheduler includes a task list of scheduled 
server tasks to be performed. 

20 Fig. 13 illustrates a situation where a browser requests a document containing an 

EM WEB_STRING tag whose processing is expected to interfere with other application 
operations. The initial HTTP request 1301 for the document is acknowledged 1303, 
conventionally. When the EMWEB_STRING tag is encountered, control transfers 1305a to the 
appropriate source code fragment 1305b in the application. The application then calls the 

25 suspend function 1307 of the EmWeb™/server and returns a dummy value 1309 to the function 
call generated at the EMWEB STRING tag location. Calling the suspend function 1 307 causes 
the scheduler to remove the EMWEB_STRING processing task from the task list. When the 
application has finally prepared the dynamic content required in the original function call, the 
application calls a resume function 1311 of the EmWeb™/server. Calling the resume function 

30 1311 requeues the EM WEB-STRING processing task on the task list, as the current task. The 
EmWeb™/server responds by calling 1305c the function 1305d defined at the 
EMWEBSTRfNG tag again, this time immediately receiving a response from the application in 
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which the requested dynamic content 1313 is returned. The dynamic content is then served to 
the browser 1315. 

The suspend/resume feature is particularly useful in distributed processing environments. 
If an embedded application is running on one processor of a distributed environment, but 
5 dynamic content can be requested which is obtained only from another processor or device in the 
distributed environment, then the use of suspend/resume can avoid lockups or degraded 
processing due to the need to obtain the dynamic content through a communication path of the 
distributed environment. Consider, for example, a distributed system including a control or 
management processor, and several communication devices. An embedded application running 
10 on the management processor can be queried for configuration data of any of the communication 
devices. Without suspend/resume, obtaining that data would tie up the communication path used 
by the management processor for control of the various communication devices, degrading 
performance. 

The described embodiment of the invention illustrates several advantages thereof. For 

15 example, an embedded application can now have a GUI which is independent of either the 
application platform of that used to view the GUI. For example, the GUI can be operated 
through a Microsoft® Windows™ CE machine, Windows™ 3.x machine, Apple Macintosh, 
WebTV box, etc. running conventional browser software. Also, development of a GUI for an 
embedded application is greatly simplified. The look and feel is designed using conventional 

20 HTML design techniques, including straight-forward prototyping of the look and feel using a 
conventional client server system, using simple HTML extensions. Integration with the 
embedded application does not require the developer to learn or develop any special interface, 
but rather uses some HTML extensions to incorporate application source code directly into the 
HTML content. Yet another advantage in that the entire embedded application along with an 

25 HTTP-compatible server and the content to be served is reduced to a minimum of application 
source code, data structures for static data and data structures for dynamic data. 

The present invention has now been described in connection with specific embodiments 
thereof. However, numerous modifications which are contemplated as falling within the scope 
of the present invention should now be apparent to those skilled in the art. For example, the 

30 invention is not limited to content whose source is HTML. Any mark up language could be used 
in the context of this invention. Alternatively, the content source could be raw text, which is 
particularly suitable for situations where the output of the user interface is also processed by one 
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or more automatic software text filters. Therefore, it is intended that the scope of the present 
invention be limited only by the properly construed scope of the claims appended hereto. 
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1. Introduction 

The explosive growth of the Worid-Wide-Web in recent years has created anew standard 
for the Graphical User Interface (GUI) of networked applications: the Web browser. 
Netscape®, Mosaic, and other commercial and public-domain Web browsers are 
ubiquitous and inexpensive. 



1.1. Web-based Network Management 

Network management is a natural application for the World-Wide-Web. Before the Web, 
network management required end-users to purchase expensive custom-built GUI 
applications that used the SNMP protocol to manage network-based devices. With 
World-Wide-Web technology, many of these applications can be replaced by 
economical Web browsers. 

World-Wide-Web standards make It possible to migrate the "look-and-feel" intelligence 
of the device configuration GUI away from third-party and custom-built network 
management applications and into the managed device itself. This migration gives 
vendors control over the configuration "look-and-feef" of their products among both low-, 
cost Web browsers and the high-end third-party network management applications of 
the future. 

Web-based network management can greatly accelerate the time-to-market for 
products traditionally managed by SNMP. With SNMP-based management, new 
product features require significant engineering resources to design and implement 
proprietary MIBs and develop customized GUI applications to manage the new features. 
On the other hand, Web-based management GUI applications can be rapidly prototyped 
and implemented using simple HTML forms. 

SNMP will continue to play an important role in high-end network management 
applications by utilizing standard MIBs to monitor the overall topology and health of 
devices throughout the enterprise network. However, the new World-Wide -Web 
standards offer an exciting alternative to SNMP for the configuration and management 
of individual devices. 



1*2. Web-based Systems, Devices, and Software 

Embedded Web server technology can enable remote configuration, monitoring, and 
diagnostic capabilities for a wide range of applications. Imagine sending and receiving 
faxes, checking your voice-mail, and knowing the availability of your favorite candy bar 
in the vending machine down the hall by using your Web browser? Your office manager 
could configure the phone switch and voice-mail system, check the toner and paper 
levels in the photocopying machine, and monitor the security alarm system from their 
desktop. Your automobile mechanic could connect to your car's computer to perform 
engine diagnostics, and if they were stumped, the manufacturer could examine the 
results from around the world over the Internet. 
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1.3. Goals 

EmWeb™ by Agranat Systems is a family of Embedded World-Wide-Web protocol 
software products engineered for the demanding real-time requirements of embedded 
systems. 

Goals of the EmWeb product architecture include: 

- Ease of use 

. Support rapid prototyping and implementation of new World Wide Web interfaces 
including device monitoring, configuration, and network management. 

. Easily portable to a wide-variety of real-time embedded operating environments 
with limited operating system capabilities, memory, and CPU resources. 

. Easily upgradable with new releases as World-Wide-Web standards continue to 
evolve rapidly. 

- High performance 

. Efficient implementation for real-time processing environments. 
. Small foot-print to minimize FL^SH and RAM resources required. 

- Security 

. Support for authentication and security standards as they continue to evolve. 
. Configuration of method-independent access controls. 



1.4. Assumptions 

This functional specification assumes that the reader is familiar with the C programming 
language, the World-Wide-Web, and standards such as HTML (Hyper-Text Markup 
Language). Knowledge of HTTP (Hyper-Text Transport Protocol) and CGI (Common 
Gateway Interface) is also helpful to understand some of the more advanced features, 
but isn't required for most applications. 
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2. Overview 

One draw-back to traditional World-Wide-Web servers is the CGI interface. Although 
HTML provides a convenient mechanism for sending interactive forms to a Web browser 
complete with text fields, checkboxes, and pull-down menus, the CGI interface used by 
server applications to process submitted forms is difficult to master. Form processing is 
essential for network management applications because it is the best way to implement a 
device configuration screen using World Wide Web protocols. However, CGI is not an 
appropriate interface for the rapid implementation and prototyping of new network 
management capabilities (EmWeb's number one goal). Another draw-back to traditional 
World-Wide-Web servers is the static nature of the content of files served to the Web 
browser. These files are typically resident on disk and are not expected to change 
frequently. On the other hand, the data of interest to network management applications is 
constantly changing (e.g. the number of packets received on a particular Ethernet port). 

The EmWeb architecture works around the draw-backs of traditional World-Wide-Web 
servers by extending the standard HTML specification with new proprietary tags 
developed by Agranat Systems, These tags make it possible to provide a more intuitive 
HTML form processing interface for embedded systems, and give the application run-time 
control over the document content for the presentation of dynamic data. Note that these 
tags are not actually sent to the Web browser. Instead, they are stripped out and 
interpreted by the Em Web/Compiler. 

The EmWeb product consists of two components: The EmWeb/Compiler and the 
EmWeb/Server. 

The EmWeb/Compiler is a tool provided by Agranat Systems that runs on an engineering 
development work-station under Unix, Windows/NT (x86), and Windows/95. The tool 
compiles one or more directories of files containing HTML, Java, text, graphics, etc., into 
one or more EmWeb archives. Each archive consists of an object code component and a 
fixed data component. These components are usually linked into the target's run-time 
image at compile time. However, the EmWeb architecture permits the dynamic loading 
and unloading of the fixed data components at run-time. Furthermore, if the target's 
operating system supports the dynamic loading and linking of object code modules, then 
entire archives may be loaded and unloaded at run-time. 

The EmWeb/Server is a portable run-time library implemented in ANSI C which is 
compiled and linked with the target platform's application software. The EmWeb/Server 
implements the HTTP protocols to handle requests from Web browsers and interfaces 
with the archives created by the EmWeb/Compiler. The EmWeb/Server implements an 
application interface (API) to the target software environment's memory management, 
buffer management, and TCP/IP protocol stack. 
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3. EmWeb/Compiler 

The EmWeb/Compiler processes directories of HTML and other Web documents to 
generate ANSI C code. The generated C code is then compiled using a C cross-compiler 
to generate object code for the target system. HTML forms are translated by the Em Web/ 
Compiler into a simple C function call interface customized to the application The 
software developer is responsible for implementing the application-specific C code using 
these simple interfaces. The EmWeb/Compiler can generate function prototype 
definitions (a C include header file) to ensure correctness, and optionally generates stub 
functions to accelerate development. 

The figure below illustrates the operation of the EmWeb/Compiler. 
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3.1. ErnWeb Context 

The Em Web/Server maintains a handle of type Evsconcexc at run-time that corresponds 
to a specific HTTP request from a Web browser client. This handle is made available to 
the application code responsible for providing the run-time content of HTML documents 
and forms. 

The Em Web/Server contains a library of functions available to the application for 
extracting information attached to this handle. For example, the application may want to 
determine the type of browser making a request, and change the look-and-fee! of the 
requested document to take advantage of features available to particular browsers. In 
this example, the application could extract the browser type as follows: 

bytes a evsConcextUsexAgent (evsContexc, 

user^agent, sizeof (*usex_agent) ) ; 

For more information about available context information functions, refer to 4.1.5. 
Request Context Access, page 48. 

3.2, HTML Extensions 

The content to be provided by the ErnWeb server is prepared as you would content for 
any normal Web server. The developer constructs a directory tree (or trees) of 
documents, which may include HTML documents, Java, text, graphics, and sound 
samples. The ErnWeb compiler is then run over the content directory tree to build an 
internal database that is compiled and linked with the EmWeb/Server and the system 
code. 

ErnWeb defines proprietary HTML tags and attributes for access to system data and 
dynamic system control of the served documents. These tags are never served to 
browsers by the EmWeb/Server, and because (with one exception) they have no body 
part (they do not use a start and end tag, but only a stand-alone tag with attributes), they 
are ignored by browsers that see them when browsing the content tree either locally or 
via a non-EmWeb server. This facilitates testing and prototyping of content. 

3.2.1. EMWEB_STRING 

The < emweb__s tring > tag is used to provide applications with run-time control of an 
HTML document's content by encapsulating a fragment of C code in the document 
itself. This C code is executed as the document is being served to a Web browser and 
returns a null-terminated character string that is inserted as-is into the document in 
place of the <emweb_string> tag. 

To include content in a document (which may include any standard HTML): 

<EMWEB_STRING C-' . . . ; return (char *) sotnestr ing; ' > 

or 

<£MWEB_STRING EMWEB_ITERATE O ' . . . ; return (char •) somes txing; ' > 
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The EmWeb/Compiler extracts the C language code fragment from the emweb_string 
tags in an HTML document and constructs a C module from them. Each fragment must 
end with a return statement that returns a pointer to a null-terminated string (or a null 
value which inserts no content). When the location of the emweb_string tag in the 
content is reached, the EmWeb/Ser/er executes the code fragment and inserts the 
returned string into the document. If the optional emweb_xterate attribute is specified, 
the code fragment is called repeatedly until it returns a null pointer value. The number 
of iterations already processed (beginning with zero) is available to the code fragment 
by calling: 

ewsContextlter anions (evsContext) ; 

Note that the local variable 

EwsContext ewsConcext; 

is made available to the emweb_strinc C code fragment by the Em Web/Compiler. 

The returned string must not be an automatic (stack) variable. The value is copied for 
transmission by EmWeb/Server immediately after returning. Thus, a single static 
string buffer may be shared by multiple code fragments. If pre-emptive multi-threading 
is to be used, the application may maintain a per-request buffer as part of its network 
handle. Alternatively, emweb_iterate may be used to support dynamic allocation of the 
string buffer as follows. On the first iteration (#0), memory may be allocated, filled with 
data, and returned to the EmWeb/Server for transmission. On the second iteration 
(#1), memory may be released and a null pointer returned to terminate the iteration. 

The EmWeb/Compiler treats the embedded code opaquely; from the compiler's point 
of view, the code is simply a string of text that gets assembled into a generated code 
file. (See 3.6. Compiler Output, page 25). 

As such, the EmWeb/Compiler needs to know the beginning and end of the embedded 
C code fragment. The character following the c» attribute in the emweb_string tag 
identifies the "bounds" of the embedded C code. This character must be either a 
single quote Q or double quote ("). When the EmWeb/Compiler identifies this 
"boundary character", it then treats all following characters as part of the embedded C 
code fragment, until it finds the next terminating "boundary character". 

The obvious problem here is that the embedded C code can contain a single or double 
quote as part of the C code. For example: 

return "Example of EmWeb' s dynamic content\n" ; 

In order to keep the EmWeb compiler from mistakenly confusing a single or double 
quote that belongs to the C code fragment as the ending "boundary character", the 
programmer must escape (using T) any character intended for the C code that would 
be confused with the terminating boundary character. Thus, the above code fragment 
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could be embedded in an emweb_string tag in either of the following ways: 

<EMWEB_STRING C-'return "Example of EmWebV s dynamic content\n" ; ' > 
<EMWEB_STRING C-'Tecurn \"Example of EmWeb's dynamic content\n\" ; » > 

The <emweb_string> tag may optionally be typed using the emwebjtype attribute as 
follows: 

<EMWEB_STRING EMWEB_TYP£ -DECIMALJJINT C«" 

recurn (uint32 *) &some_integer ; ' > 

If emwebjtype is specified, then the C code fragment must return a pointer to data with 
the corresponding type. EmWeb/Server will convert the value into a character string 
automatically. A table of supported types can be found in section 3.2.5.3. HTML Form 
TEXT Input Fields, page 13 

3.2.2. EMWEBJNCLUDE 

The Em Web/Server provides server-side inclusion of any part of its content tree using 
the emweb_include tag; it is used in the same way as the emweb_string tag: 

<EMWEB_INCLUDE COMPONENT- ' Local -URL' > 

or 



<EMWEB_INCLUDE C«' . . . ; xetuxn (char *) locaiURL; ' > 

or 

< EMWEB — INCLUDE EMWEB_ITERATE O ' . . . ; return (char *) localURL; ' > 

If the component tag is specified, the specified local element is resolved and inserted 
into the current document. This allows standard parts such as headers and footers to 
be stored only once. 

As in emweb_strikg 1 the fragment specified by the o attribute must end with a return 
statement that returns a pointer to a null-terminated string (or null). For 
jemwebjcnclude, however, this string is treated as a relative or absolute path name 
within the local content tree. The path name is resolved to an entire document, which 
is then inserted in the current document for return to the browser. If the optional 
emweb_iterate attribute is specified, the code fragment is called repeatedly until it 
returns a null pointer value. The number of iterations already processed (beginning 
with zero) is available to the code fragment using the same access routine used for 
emweb_string. This tag is useful for building a response from components that may 
be part of the original document tree, or created dynamically. 

Note that the local variable 

EwsContext evsContext; 

is made available to the emweb_include C code fragment by the Em Web/Compiler. 
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The same quoting rules as emweb_string apply to emwebjenclude. 

3.2.3. EMWEB_HEAD 

Because the <emweb_string> and <emweb_i*jclude> tags allow the application to 
encapsulate fragments of C code within an HTML document, a mechanism is needed 
to provide the code fragments with the necessary global definitions, header files, 
external declarations, etc. needed for compilation. The <emweb_head> tag is provided 
for this purpose. 

<EMWEB_HEAD C= ' #include f ile-name .h' > 

The emwebjjead tag, if present, should appear in the head portion of the HTML 
document (this is not enforced, but the code fragments from all emweb_head fragments 
are placed at the beginning of the generated module, so doing so is less confusing); it 
specifies a source fragment to be inserted in the generated module outside any C 
function. This fragment may declare variables, constants, or (as shown in the example 
above) C preprocessor directives - it could even define entire subroutines. This 
fragment is never executed directly by the EmWeb Server, so it does not insert any 
content into the document at the location of the tag. 

Note that all emweb_head code fragments from all HTML files in an archive are 
combined into the generated archive object code component source file. Therefore, it 
is recommended that common ainciude directives appear only in one document in the 
archive (typically, the index.html document at the archive's root directory). 

The same quoting rules as emweb_string apply to emweb_head. 

3.2.4. EMWEB_PROTO 

When designing an HTML document, it may occasionally be useful to provide content 
with which to preview the page, but which does not appear in the compiled document. 
This is accomplished with the emweb_proto begin and end tag; the EmWeb/Compiler 
removes these tags and everything between them when producing the document 
database, but the text between them is interpreted normally by a browser viewing the 
HTML document directly or via a conventional server. For example: 

<H4> 

System: <EMWEB_STRING C- M retuxn mib2sysName; •' > 
<£MWEB_PR0T0 > sy s t em - name < /EMWEB_PROTO > 
</H4> <~ 

When compiled, the system name displayed in the first level header will be the value 
in the string variable mib2sysName, but viewed with a browser when previewing it Jooks 
like: 

sy s cem : sy s cem - name 

Note that the EmWeb/Compiler Ignores HTML comments (e.g. n < • - • ... -•>"). If 
emweb string and emwebjenclude tags are present within HTML comments, they will 
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be expanded by ErnWeb/Server. If it is desirable to "comment out" an emweb_string 
or emweb_include tag, emweb proto tags should be used instead. 

3.2.5. Forms 

Form processing takes place as two operations: serving the form to the browser, 
possibly with current or default values set in some form input elements, and 
processing the values from the submitted form. Each of these operations is assisted 
•by an application-provided routine associated with the form. Prototypes for these two 
application routines are produced for each form by the EmWeb/Compiler using 
information provided by EmWeb attributes on the FORM and its input elements. 

Restriction: While HTML allows it, EmWeb does not support 
nested form tags (you may not have a form within a form). 

The elements for each form are combined in a generated C data structure by the 
EmWeb Compiler; this structure is passed by the EmWeb Server to each of the two 
form processing routines, and includes information on the status of each element. 

3.2.5.1. Form Element Names 

The emweb_name attribute is used to specify the names to be used by the EmWeb/ 
Compiler when generating function and structure names. 

On the form tag, the emweb_name attribute specifies a base name to be used to 
generate the function names and the form data structure name. (This implies that the 
value of the emweb_name attribute must be a valid C identifier). Note that if emweb_name 
is not present in a <form> tag, then the form is simply ignored by the EmWeb/ 
Compiler and is passed as-is to the brov/ser. 

Consider the following example. Suppose there exists an HTML document 
"example.html" that contains: 

ST <FORM METHOD ■ POST EMWEB_NAME- foo ACTION«£ax > 

- The action attribute is optional; if action is not specified, then there may be only one 
form in the document. If action is specified, it is served to the browser as 
"ACTioN-exampie. html/bar". (This allows ErnWeb/Server to differentiate between 
multiple forms in a document. It also allows the submission of forms to be protected 
by different access controls than the serving of forms. See 3.4. _ACCESS Files 
page 22). " ' 

The EmWeb/Compiler generates the following function and structure prototypes: 

typedef struct EwaForm foo s 
( 

struct 
{ 

} value; 
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struct 
{ 

} status; 
} EwaFoim__foo; . . . 

void ewaFormServe_/oo (EwsContext context, EwaForm_jfoo «foxmp) ; 
char * evaFormSubmi t_foo (EwsContext context, EwaForm_f oo *foxmp) ; 

The ellipsis (...) above are replaced by declarations of the structure members to hold 
the data for each form element. The standard HTML name attribute is used in each 
input tag of the form to specify the structure member names within the form data 
structure. 



Restriction: While HTML allows arbitrary string values for name 
attributes, EmWeb requires that name attributes are valid C 
identifiers since they are used as field names in the form's C 
structure definition. 

The application-provided ewaFormserve_x"oo function is invoked by EmWeb/Server 
when the HTML document containing the form is requested by a Web browser. This 
provides the application with an opportunity to modify the default values displayed 
by the browser at run-time. 

The application-provided ewaFoxmsubmi t_f oo function is invoked by Em Web/Server 
when the corresponding HTML form is submitted. This provides the application with 
an opportunity to process the submitted form data and generate an appropriate 
response. 

3.2.5.2- Form Data Structure 

The generated form data structure passes information for the form between the 
system and the EmWeb/Server. It has two sections: Value 1 and 'status 1 , each 
containing one or more members for each form element. The 'status 1 section 
member is a flag that indicates the status of the contents of the Value 1 member. The 
Value 1 member contains the data for the form element in an internal representation 
which may be specified by the form author using the emwsbjtype attribute. For 
example: 

<INPUT TYPE-TEXT SIZE-15 MAXSI2E-15 VALUE-127 . 0 . 0 . 1 
NAME ■ i fAddz EMWEBJTYPE =DOTT£D_IP> 

The example above produces the following structure members: 

typedef struct EwaForm_f oo_s 
{ 

struct 
{ 

uint32 IfAddr; 
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uincf 
uintf 



ifAddr^size; 

i £ Addr_max leng th ; 



} value; 
struct 



uint8 



ifAddr; 



} status; 
} EvaForm_foo; 

The value. if Addx member contains the host-order 32-bit IP address. The 
„ewa Foxmsex ve_foo function sets this structure member with the value to be displayed 
on the form and sets status. ifAddr to ew_form_initialized. (Note that if 
status . if Addx is not changed by the application, then the form is displayed with the 
value specified by the value tag, "127 .0.0. 1"). When the Web browser end-user has 
entered a valid IP address and submits the form, the EmWeb/Server sets 
value. ifAddr to the value provided by the browser and sets status. ifAddr to 

EW_FORMJR£TURNED before invoking evaFormSubmi t_f oo. 

The value. if Addi_size member is generated because the size attribute was 
specified and defaults to 15. This gives evaFormserve_foo an opportunity to override 
the field size value before serving the form. (This field is not used by 

evaFormSubmi t_f 00). 

The value. ifAddr_max length member is generated because the maxsize attribute 
was specified and defaults to 15. This gives evaFormserve_f 00 an opportunity to 
override the maximum field size value at run-time. (This field is not used by 

evaFoimSubtni t__f 00). 

The status. ifAddr member is used to indicate the status of the form element 
^member and consists of a bitfield defined as follows (from src/inciude/ew S _def .h): 

C, • /* 

* For ewaFormServe_* 
•/ 

#define EW_FORM_INITIALIZED 0x01 /* set if field initialized */ 
#define EW_FORM_DYNAMIC 0x02 /* set if field evaAlloc'ed */ 



For the evaFormserve_* call (when the form is being sent to the browser), the 
structure is passed with the status for each element set to either zero, or 
ew_form_initialized if a default value was specified by the HTML vaule tag. When 



* For evaFormSubmi t_* 



tfdefine EW_FORM_RETUR*IED 0x10 
#define EW_FORM_PARSE_ERROR 0x20 
#define EW FORM FILE ERROR 0X20 



/* set if value returned */ 
/• set if value invalid */ 
/* or i/o error */ 
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control is returned to the EmWeb/Server, the server checks each status and uses 
the new value for each field for which the ew_form_initialized is set Initialized 
values override any value, checked, or selected values specified in the source 
HTML document. The ew_form_dynamic flag is only valid for type fields containing 
pointers to data (including text, password, hidden, textarea, submit, and 
emwebjtype-hexstring) and indicates that the memory referenced by the pointer 
was allocated by ewaAiioc and must be freed by EmWeb/Server using evanee after 
the form is served. 

When the form is submitted by the browser, the server attempts to convert each 
value returned by the browser to the appropriate type. The server sets the status 
member to indicate the status of the data member of the structure, and then calls the 
evaFormsubmi t_* routine associated with the form. The ew_form_returned flag is set 
if a valid value was returned for the field in the submission. The 
ew_form_parse_error flag is set if a value was returned, but was not parsed correctly 
for the specified emwebjtype. 

Note: When a form is submitted, the contents of a value field is 
undefined unless the ew_form_returned flag is set in the 
corresponding status byte. 

The application processes the submitted values and returns a string containing the 
URL to use as the redirection response to the Web browser, or null for an empty 
( B 204 No Content") response. Alternatively, the following function may be invoked to 
return a local relative URL from the archive as a response. 

EvsStatus ewsContextSendReply ( Ewscontexc context, char * url ) ; 



3.2.5.3. HTML Form TEXT Input Fields 

A text field can be used to represent a wide variety of value types. For example, a 
text field may be used to configure an IP address in which case the natural C- 
language representation is a host-order 32-bit integer. By default, a text field is 
simply a null-terminated character string. However, the emwebjtype attribute may be 
used to indicate any of a number of supported ErnWeb types. Refer to the table 
below for details. 

HTML text fields may specify a field size and/or a maximum length. If so, additional 
_size and _maxiength structure members are added to the form structure to give the 
application run-time control over these values. The format and resulting form 
structure fields of a text input field is given below. 

<INPUT TYPE "TEXT NAME- name { MAXLENGTH « # ma x } {SIZE«ftsize) {VALUE-value} 
{ EM WEB^TYPE-ewtrype} > 

EwType name; /* defaults to value */ 

uintf name_maxlength; /* defaults to #max •/ 
uintf name size; /* defaults to #size */ 
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The following table lists all emweb_type values currently supported. 



EMWEB^TYPE 


C-Type 


Description 


(not specified) 


char * 


null-terminated string 


DECIMAL_INT 


inc32 


32-bit signed integer 


DECIMALJJINT 


uint32 


32-bit unsigned integer 


HEX_INT 


uinc32 


32-bit unsigned hex integer 


DOTTED_IP 


uint32 


32-bit host-order IP address translated using 
the conventional dotted-quad ASCII notation. 


IEEE_MAC 


char [6] 


IEEE MAC address (any of ':' or or " is 
accepted between bytes on input, displayed 
wjtn . i/Q bit is least significant (Ethernet) 


FDDI_MAC 


char [6] 


FDDI MAC address (any of ':' or or M is 
accepted between bytes on input, displayed 
with '-'). i/G bit is most significant (FDDI, 
Token Ring) 


STDJMAC 


char [6] 


A MAC address • if ':' or " is used between 
bytes on input, it is interpreted as IEEE (l/G 
bit is least significant); if ■-■ is used on input, it 
is interpreted as FDDI (l/G bit is most signifi- 
cant). Displayed as IEEE with 


HEX_STRING 


strucc { 
uint32 length; 
uincs *datap; 
}; 


A hex string. Any of V or or " or white- 
space is accepted between bytes. Displayed 
with 


DECNET_IV_ADDR£SS 


uintl6 


area.node 


OBJECT_ID 


struct { 
uint32 length; 
uint32 *datap; 
}; 


A variable length array of unsigned decimal 
integers displayed with periods between ele- 
ments. 



Note that support for additional Em Web types may be added in future releases. 



3.2.5.4..HTML Form PASSWORD Input Fields 

A password field is represented by a null-terminated character string. HTML 
password fields may specify a field size and/or a maximum length. If so, additional 
_size and _maxiengch structure members are added to the form structure to give the 
application run-time control over these values. The format and resulting form 
structure fields of a password input field is given below. 
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<INPUT TYPE -PASSWORD NAME-name {SIZE«=*si ze) {MAXLENGTH c t? max length) 
{VALUE -value) > 

char *name; /* defaults to value, or NULL*/ 

uintf name_size; /* defaults to #size •/ 

uintf Da/nejnaxlength; /* defaults to tfmaxlength */ 

3.2.5.5. HTML Form CHECKBOX Input Fields 

Checkbox fields are represented as booleans. The optional value field is passed 
unchanged to the browser and is not used by Em Web. 

<INPUT TYPE ■ CHECKBOX NAME».na/7ie {VALUE*value) {CHECKED) > 
boolean name; /* defaults to TRUE if CHECKED , else FALSE */ 

Note: If the ew_form_returned bit in the status byte is set on 
submission, then the checkbox was checked and the value is 

TRUE. 

3.2.5.6. HTML Form RADIO Input Fields 

Radio buttons are represented by a C enumerated type generated by the Em Web/ 
Compiler for each unique value assigned to a radio button in the archive. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

<INPUT TYPE-RADIO NAME-Jia^ie VALUE*vaiuei { CHECKED} > 
<INPUT TYPE=RADIO NAME* 2 name VALUE«vaiue2 {CHECKED) > 

typedef enutn EwaFormEnum w ev_aicAi ve_e 
{ 

, valuel 
,value2 

} EwaFo rmEnum_e w__az chive; 

EvaFormEnum_ew_axchive name;/* defaults to checked value •/ 

Restriction: While HTML allows arbitrary string values for value 
attributes, EmWeb requires that value attributes for radio 
buttons are valid C identifiers since they are used as 
enumerated type identifiers. 

Note that EmWeb/Compiler generates a single enumeration for each archive. The 
ew_azchive suffix may be overridden at the command line (See 3.5. Compiler 
Options, page 23). 

The following function is provided as a convenience for translating from the 
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enumerated type's integer value to its name as specified by the value attribute: 

const chai *evsFormEnumToS tring ( EwsConcexc context, int value ) ; 

3.2.5.7. HTML Form IMAGE Input Fields 

Images are "read only" from the point of view of the application as they return the x 
and y image coordinates selected by the end-user from the Web browser. Therefore, 
the generated structure value members are only useful in the ewaFormSubmit_* 
application function. Structure members are generated representing the x and y 
coordinates as follows. 



<INPUT TYPE ■ IMAGE NAME«na/ne SRC-src {ALIGN=align} > 

typedef struct EvaForm_r"oo_s 
{ 

struct 
{ 

uint32 name^x; 
uint32 namely; 

} value; 
struct 
t 

uinte name; 

} status; 
} EwaForm foo; 



3.2.5.8. HTML Form HIDDEN Input Fields 

Hidden fields are identical to text fields except that they are not displayed (and thus 
jiot modified) by the browser. They are typically used by applications to pass context 
-information to the browse. This context information is returned to the application 

during submission. 

<INPUT TYPE-HIDDEN NAME-name {VALUE-value} {EMWEBJTYPE-ewtype} > 
EwType name; /+ defaults to value if present */ 

3.2.5.9. HTML Form SUBMIT Input Fields 

Submit buttons with name attributes are represented by a null-terminated character 
string. Submit buttons without name attributes are not included in the form structure. 

<INPUT TYPE-SUBMIT {NAME-name} {VALUE-value} > 

char *name; /* defaults to value if present */ 
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3.2.5.10. HTML Form RESET Input Fields 

No structure member is generated for a reset button. 

3.2.5.11. HTML Form SELECT/OPTION Fields 

Select boxes may be used to select a single item from a list (the default), or multiple 
items from a list (if the attribute multiple is present). For single item selection, values 
are represented by a C enumerated type generated by the Em Web/Compiler. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

<SELECT NAME e /ja/ne {SIZE*#size} > 

<OPTION VALUE=vaiuel {SELECTED} > 
<OPTION VALUE" vaiue2 {SELECTED J > 

</SELECT> 

typedef enum EwaFoimEnum_evf_ax chl ve_e 

{ 

, vaiuel 
, vai ue2 

) EvaForinEnum_ ew^axchi ve; 

EvaFoxmEnum_ei/_ar chive name;/* defaults to selected value */ 

For multiple item selection, a status and value form structure field is generated for 
each option as follows: 



<SELECT NAME^na/ne {SIZE«#size] MULTIPLE > 

<OPTION VALUE-vaJuel {SELECTED) > descxiptive text 
<OPTION VALUE«vaiue2 {SELECTED} > descxiptive text 

</SELECT> 

boolean vaiuei; /« defaults to TRUE if SELECTED */ 

boolean va2ue2; /* defaults to TRUE if SELECTED */ 

uintf name^size; /* defaults to ftsize */ 

HTML select fields may specify the size of the selection box. If so, an additional 
_size structure member is added to the form structure to give the application run- 
time control over this value. 



Restriction: While HTML allows arbitrary string values for value 
attributes, Em Web requires that value attributes for select 
options are valid C identifiers since they are used as 
enumerated type or structure field identifiers. 

3.2.5.12. TEXTAREA 

The textarea value is a null-terminated string of characters. Additional value fields 
are placed in the form structure for the number of rows and columns in the textarea. 
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These fields are initialized by Em Web/Server to the defaults specified in the source 
HTML document, but may be overridden at run-time by the application's 

evaFormServe * function. 



<T£XTAREA .COLS«#cols ROWS=#rows NAME=name > 
</TEXTAREA> 

char *name; /* null - terminated string •/ 

uintf name_cols; /* default to frcols */ 

uintf name__rovs; /* default to frrovs */ 

Note that the *name points to the text present in the textarea input field. 
3.2,5,13. File Upload 

RFC1867 file upload defines a new form input type as follows: 

< INPUT TYPE "FILE NAME" name {VALUE -value} (SIZE=*rovs { ,*cols} } > 

Note: Use of file input types requires that the form uses 
multipart/form-data as an encapsulation type. This must be 
specified in the <form> tag as follows: 

<FORM METHOD«POST ENCTYPE-multipart/form-data ... > 

This causes the browser to prompt the user for a local (relative to the browser) 
filename (by default, value is used if specified). On submission, the file is uploaded 
to the server along with other form field values. 

EmWeb/Compiler parses file type input fields into the following fields in the form 
value substructure: 

char . "name; /• serve only: default filename */ 

EyaFileHandle name_handle; /• submit only: received file */ 

u * ntf name^size; /+ serve only: #rovs (no #cols) */ 

u * ntf na/ne_iovs; /« serve only: ffrows <v/ttcols) •/ 

Ulntf name_cols; /* serve only: #cols •/ 

In addition, the following fields in the form status substructure are generated as well: 

u f ncB name; /* status for filename •/ 

uint8 name_handle; /* status for received file */ 

For more detailed information on the file upload interface, please refer to 4 1 8 Local 
Fiiesystem Interfaces, page 54. 

3.2.6. Graphic Maps 

The HTML ismap attribute on an img tag specifies that the file is an image map. Such 
an img tag must always be enclosed within an anchor that specifies a hyper-link URL 
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The ismap attribute causes a dick within the image to be sent as a request to the URL 
in the enclosing anchor, qualified by the x & y coordinates of the click within the image. 

EmWeb provides support for image maps through a map element in the HTML source 
tree which specifies rectangular regions and URLs to be associated with them. 

The interface designer creates an image map file, a text file which defines the URLs 
to be provided for each region of the image. The syntax of the entries is: 

xect- line | default-line 

rect-line xecc uxl point point 

point z : « x,y 

default-line ::» default uxl 

The xect token specifies a URL to be served in response to the specified top-left and 
bottom-right coordinates. The optional default specifier provides the URL for any 
coordinate not specified by some xect (only one default is allowed). Order of the xect 
lines is significant - If the regions overlap the first match takes precedence. 

If no match is found, and no default is specified, the server returns R no content" to the 
browser, effectively a no-operation. Otherwise, the matching URL is returned to the 
browser as a redirection. The URL may be relative to the map file in the archive, or 
absolute. 

The map files are compiled by Em Web/Compiler so that they do not need to be parsed 
at run-time by the Em Web/Server. The following illustrates the syntax of a typical map 



xect examplel.html 15,18 169,37 
xect example2.html 157,46 385,65 
xect example3.html 365,71 460,87 
default /home. html 

If the above file was " sample, map", and corresponded to the image Vpictuxes/ 
sample . gif n , the following HTML would be used to implement the map: 

<A HREF- -sample. map "> <img SRC«"/pic tuxes/sample .gif •■ ISMAP> </a> 

By convention, map files use the suffix , .ma P , l but this can be changed. See 3.3 
mime.types Configuration File, page 20, and 3.4. ^ACCESS Files, page 22. 

3.2.7. Cache Control 

The HTTP/1. 0 protocol has some simple provisions for communicating cachabiiity 
information to caches and proxies between the server and the browser. HTTP/1.1 
provides even greater cache control features. 
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By default, EmWeb/Server classifies compiled-in documents as being either static or 
dynamic. A document is considered dynamic if it contains one or more emweb_strings 
emweb_includes, or EmWeb-enhanced HTML forms. Otherwise, the document is 
static. 

When serving a static document, EmWeb/Server sends a Last-Modified HTTP header 
indicating the time and date that the corresponding archive was created by the 
EmWeb/Compiler. No other cache control headers are generated in HTTP/1.0. With 
HTTP/1.1, a Cache-Control header is generated indicating either "public" if the 
document is not protected by an authentication realm, or "private" if it is. 

When serving a dynamic document, EmWeb/Server sends a Last-Modified and 
Expires HTTP header indicating the current time and date, as well as "Pragma- no- 
cache" for HTTP/1 .0 and "Cache-Control: no-cache" for HTTP/1 .1 . •* 

It may be desirable to override the above default behavior for certain applications 
Specifically, an application may desire static treatment of a dynamic document For 
example If emweb_incltoe tags are used to insert common headers and footers 
EmWeb/Server would treat the document as dynamic even though the content may 
actually be static. The following EmWeb tag may be used anywhere in an HTML 
document to mark it as static for cache control purposes: 

<EMWEB_STATIC> 

3.2.8. EmWeb CGI 

The mechanisms described above are designed to meet most needs of the system 
designer without having to deal with the complexities of direct access to the HTTP 
input and output mechanisms. If such access is desired, the EmWeb raw CGI interface 
provides access similar to that available in a CGI program environment on any HTTP 
server. See 4.1 .6. Raw CGI, page 51 . 

3.3. mime.types Configuration File 

The mime . types configuration file is read by EmWeb/Compiler before processing source 
directones of HTML and other Web documents. If "-m" is specified on the EmWeb/ 
Compiler command line, then the specified file is used. Otherwise, EmWeb/Compiler 
searches for a mime . types file by first looking at the semweb_mxme environment variable, 
and then looking at $emweb_home/semweb_mime. If the semweb_mime environment variable 
is not specified, it defaults to "mime.types". If the $emweb_home environment variable is 

not Specified, it defaults tO 7usi/local/shaxe/emveb". 

The mime.types file contains default parameters for files derived from the file name 
suffix. For example: 

# 

U EmWeb/Compiler mime.types file example 

# Anything after a is a comment. 

# A line whose first character is white space is a continuation line 
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# Each specifier must end in ';' 
# 

• html type- text/html paxse-emweb_html compress ; 

. txt type- text/plain paise=emveb_text compress ; 

.gif type-image/gif paise»binary ; 

.map imagemap; 

index-index.html; 

The suffix may be any tail match; it is not restricted to values starting with \\ The 
mime, types file contains specifiers for the default access rights and parameters of files 
ending with a particular suffix. Each specifier is the file name suffix, followed by one or 
more of the following attributes, followed by a semicolon: 



type-mime-type 

Specifies the MIME encapsulation media type represented by the file. Media 
type values are registered with the Internet Assigned Number Authority 
(IANA). Use of non-registered media types is discouraged. (Note that the 
mime-zype must be quoted if it contains a line-terminator character). The 
default type depends on the parser selected (see below). 

parse=emweb_html f emweb_Jext / text / binary 

Specifies how the EmWeb/Compiler is to parse the file. 

emweb_html indicates that the file contains HTML and the Em Web/Compiler 
handles <emweb_string>, <emweb_include>, <emwe3_proto>, 
<emweb_head> * and EmWeb HTML forms. The default type for the 

£MWEB_HTML parser is "text /html". 

emwebjtext indicates that the file contains text which may contain 

<EMWEB_STRING> , <EMWEB_INCLUD£> , <EMWEB_PROTO> and <EMWEB_HEAD> 

directives. However, such a file may not contain Em Web HTML forms. The 
default type for the emwebjtext parser is n cext/piain\ 

text indicates that 'the file contains text which should not be parsed (e.g. 
PostScript). The default type for the text parser is "text/plain". 

binary indicates that the file contains ray/ binary data. The default type for 

the BINARY parser is "application/octet -stream". 

The default parser is binary if not otherwise specified, 
compress 

Specifies that the content should be compressed. The EmWeb 
compression algorithm creates an archive-wide dictionary of common 
strings which are referenced by the individual documents. Compression 
ratios for text files of 50% can be achieved if there is sufficient redundancy 
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throughout the archive. However, compression ratios will vary widely among 
applications. The default is no compression. 

nocornpress 

Specifies that the content should not be compressed. (This is typically used 
in an _access file to override a specification in mime, types). The default is 
no compression. 

imagemap 

Specifies that the content is an imagemap that defines the coordinates for 
an image. This implies "hidden", and inherits realm membership from the 
current directory. 

ignore 

Specifies that the entry should be skipped (i.e. not included in the archive). 
This is typically used to exclude source control directories, backup files from 
editors, etc. 

The current directory is specified using 7 as the suffix name. Directories may contain 
the attribute: 

ind ex=index-file~name 

The element (in the directory) to be returned in response to an access 
request to that directory (a URL whose last component is the directory 
name). 



3.4. _ACCESS Files 

Access to individual files and directories is controlled by a configuration file in each 
source archive directory named '_access\ The _access files contain specifiers for the 
access rights of elements in the corresponding directory (and optionally for the directory 
itself using the 7 specifier). Specifiers in the _access file override specifiers in the 
mime, types file. Each specifier is the file name {not a suffix) followed by any of the 
attributes defined above for mime. types. The following additional attributes are 
permitted in ^access files. 

rea\m= realm-name 

requires that any request to access the file or directory must be 
authenticated in the named realm. If an empty realm is given (i.e. realm-" ■•), 
then the file may be accessed without any authentication. See 4.1.4. 
Authentication and Security, page 39. 

hidden 

Specifies that the file is included for use in constructing dynamic content and 
may not be seen or accessed directly by a Web browser. (Note that the 
hidden and realm attributes are mutually exclusive). 
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Specifies that this element is linked to a different URL When accessing this 
file, the browser shall be redirected to the specified relative or absolute URL 
The link attribute may not appear with any other attributes. 

If realm is specified for a directory, it applies as a default for all files and subdirectories 
within the current directory. Specifications for individual files in an_AccEss file override 
defaults specified for the directory. 

If hidden is specified for a directory, it applies as a default for all files and 
subdirectories within the current directory. Individual files and subdirectories may be 
overridden by specifying a realm. 

Note that a default 7 specification for index may be included in the mime . types file and 
overridden In individual ^access files. 

In addition to the elements in the directory, the _access file may specify the base name 
for CGI elements (which do not need actual files in the HTML tree). These are 
specified with the access attribute cgi below and may also have a realm attribute. 

cgi -symbol 

The element is a CGI application. The symbol value is used by the Em Web/ 
Compiler to generate application-specific prototypes for the raw-CGI 
interface. See 4.1.6. Raw CGI, page 51. 

Finally, form action URLs used when a browser submits an Em Web HTML form to the 
EmWeb/Server may be protected by a specific realm which may be different from the 
realm of the document containing the form. In this way a form may be used to display 
data to a less restricted realm, while permitting changes only from users in a more 
restricted realm. For example, if the HTML file "example. html" contained an EmWeb 
HTML form tag <form method-post emweb_name * f oo AcrioN*bai>, the following 
specifier may appear in the _access file corresponding to the directory containing 

"example. html". . 

exa mp 1 e . h tml /ba I I ea lm « z ea I/n - name 

Access control is only computed by the EmWeb/Server on the initial URL; if the 
element to be returned in response to the URL includes an emweb_include tag, the 
EmWeb/Server does not perform an access check on those individual elements. 

3.5. Compiler Options 

The EmWeb/Compiler program "ewe" takes the following command-line arguments 
followed by a list of one or more directories and/or files with which to build an EmWeb 
archive. 
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( -n | -name ) <archive-symbol-base-name> 

The base symbol name produced by EmWeb/Compiier corresponding to 
the object part (and, if -c is. also specified, the data part) of the archive. By 
default, this parameter Is 'ev_archive". Thus, the following symbol is 
generated by the EmWeb/Compiler in ew code.c! 

EwsArchive ew_archive; 

And if the -c option is specified, the following symbol is generated in 

ew_daca.c. 

uinte ew_archi.ve_daca[] ; 

( -m | -mime ) <mime.types fiJename> 

The path name to the mime.cypes configuration file. By default, EmWeb/ 
Compiler looks in semweb_mime {mime.cypes) followed by $emweb_home/ 
$EMWEB_MIME (/usr/local/shaie/emweb/mime . types). 

( -u | -url ) <archive-url-base-path> 

The base URL path of the generated archive. By default, this is '/'. 

( -r I -raw) j (-c | -c) 

The output format of the generated archive data component (raw by 
default). If - -raw is specified, the data component of the archive is written to 
the file ew_data.dat as a raw binary file. If -- c is specified, the data 
component of the archive is written to the file ew_daca.c as a C file that, 
when . compiled, produces an array of data reference by the symboi 
ew_archive_data. Both flags may be specified on the command line to 
cause the generation of both raw and C output files. 

( -o | -output ) 

The prefix for generated files da ca. da c, daea.c, code.c, s cuts. c, and 
pro co . h (". /ew__" by default). 

( -s j -stubs ) 

Generate ev_scubs.c file containing stubbed-out versions of form and CGI 
functions normally provided by the application to facilitate rapid prototyping 
and development 

( «C | -no-compress ) 

Disable compression of the archive. (Overrides compress attribute in 

mime.cypes and _ACCESS files). 

( -I | -little ) 

The byte-order of the generated archive data component By default, a big- 
endian archive is generated. If • -liccie is specified, then a little-endian 
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archive is generated. 

( -P j —no-preprocessor ) 

Disable generation of aline pre-processor directives in generated 
ev_code. c file; normally, these directives are included so that the C compiler 
and debuggers can find the original C in the source HTML documents. This 
option should only be used if your C compiler does not understand the 
'aline' directive. 

( -q | —quiet ) I ( -v | -verbose ) | ( -d | —debug ) 

The logging level. The -quiet options suppresses all but error messages. 
The - - verbose is specified, more logging output is produced. The - - debug 
is specified, still more logging output is produced. The default (non of these 
options specified) includes errors and some warning messages. 

( -v | -version ) 

Displays the ErnWeb/Cornpiler's version. 



Two dashes in a row indicate the end of options. All remaining parameters 
are file and/or directory names. This is optional, as any parameter that does 
not begin with a '-' is assumed to be a file and/or directory name. 

3.6. Compiler Output 

The EmWeb/Compiler produces the following output files: 
ew_data.dat 

A raw binary file containing the data component of the archive. 
ew_data.c 

If the - - c option is specified at the command line, this file is generated. It 
contains C code that, when compiled, defines an array of octets 
representing the data component of the archive and referenced by the 

global symbol uint8 ev_archive_data I] . 
ew_code.c 

A C file that, when compiled, defines the object component of the archive 
referenced by the global symbol (EwsAichive) ew_archive. 

ew_proto.h 

This C header file is generated if the archive contains EmWeb HTML forms 
or CGI documents.. The header file defines function prototypes and data 
structures for an application-specific interface between EmWeb/Server and 
application-provided functions responsible for serving and submitting forms 
and/or raw CGI processing. 



Copyright O 1997 Agranat Systems, Inc. rt Page 25 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 PCT/US97/1381 7 

- 54 - 

E mWeb™ Functional Specification Confidential . EmWeb/Compiler 

ew_stubs.c 

If the - - stubs option is specified at the command line, this file is generated. 
It contains stubbed-out versions of form and CGI functions normally 
provided by the application to facilitate rapid prototyping and development. 
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4. EmWeb/Server 

The EmWeb/Server is written in portable ANSI C and is easily integrated into a wide 
variety of embedded application environments, EmWeb/Server implements the HTTP 
protocol and responds to requests from networked Web browsers with documents stored 
in run-time archives created by the EmWeb/Compiler. 

The following figure illustrates atypical EmWeb/Server device management application. 



EoiWebi-!Ai^iv^ 



.:v.. : r: t**z 






EmWeb/Server 

: ' •' ,: -:v . • . •.• • •: . . ... n . : ■: .-. ■: .-: .•: x . x - . : 

i - - ■. ... :> : ■:;■: . :: ■ ■ ■• i 




TCP/IP 

Protocol 

Stack 



Network Access 



Device 

Configuration 
and 

Statistics 



Figure 2: EmWeb/Server 
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4.1. Application Interfaces 

The EmWeb/Server application interfaces are divided into six functional areas including 
system interfaces, network interfaces, document and archive maintenance, 
authorization and security, request context access, and raw CGI. 

Many application interfaces are optional and can be configured out of the EmWeb/ 
Server at compile time. This offers the system integrator flexibility in balancing the trade- 
offs between functionality, memory requirements, and system performance. 

Most application interfaces are provided by the EmWeb/Server and are called by the 
application. However, some application interfaces must be provided by the application 
and are called by the EmWeb/Server. Function names beginning with "ews" and data 
types beginning with *Ews B are defined by the server for use by the application. Function 
names beginning with "ewa" and data types beginning with "Ewa" must be defined by 
the application for use by EmWeb/Server. 

Status codes returned by the EmWeb/Server to the application are of type EwsStatus 
and are defined as follows (from src/inciude/evs_def .h): 

/• 

* status codes returned to the application by EmWeb/Server 
*/ 

typedef enum EwsStatus e 
{ 

EWS_STATUS_OK, 
EWS_STATUS_BAD_MAGIC , 
EWS_STATUS_BAD_VERSION, 
EWS~STATUS_ALREADY_EXISTS , 
EWS_STATUS_NO__RESOURCES , 
EWS_STATUS_IN_USE , 
£WS_STATUS_NOT_REGISTERED , 
EWS_STATUS_NOT_CLONED , 
EWS_S TATUS_NOT_FOUND , 
1=WS_S TATUS_AUTH_FAILED , 
:EWS_STATUS_BAD_STATE , 
EWS_STATUS_BAD_REALM , 
EWS_STATUS_FATAL_ERROR , 
EWS_STATUS_ABORTED 
) EwsStatus; 

Status codes returned by the application to the EmWeb/Server are of type EwaStatus 
and are defined as follows (from src/inciude/ev S _def .« : 

/• 

* Status codes returned to EmWeb/Server by the application 
*/ 

typedef enum EwaStatus_e 
{ 

EWA_STATUS_OK , 
EWA_STATUS_OK_YIELD , 
EWA STATUS ERROR 
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) EwaStatus; 

4.1.1. System interfaces 

The system functional interfaces are further divided into four functional areas including 
initialization, scheduling, memory management, and time-of-day services. 

4.1.1.1. Initialization and Shutdown 

Before any other application interface function may be used, the ErnWeb/Server 
must be initialized. This is accomplished by invoking the following function: 

EvsStatus ewslnit ( void ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (ews_status_no_resources is returned if ErnWeb/Server was unable to 
allocate memory for internal hash tables, etc.). 

A graceful shutdown of the ErnWeb/Server can be accomplished by invoking the 
function below. This causes ErnWeb/Server to terminate all outstanding HTTP 
requests and release all dynamically allocated resources. 

EwsScacus evsShutdovn ( void ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). 

4.1.1.2. Scheduling 

The ErnWeb/Server is capable of serving multiple HTTP requests simultaneously. It 
may be configured at compile-time to use either its own internal real-time scheduler 
or to make use of an external scheduler provided by the application's operating 
system. 

If an external scheduler is to be used, HTTP requests may be multi-threaded if each 
TCP connection is handled by its own operating system thread. Otherwise, requests 
will be single-threaded. The evsKuno, evssuspendo and evsResumeO functions 
described below for EmWeb/Server J s interna! scheduler would not be used. Instead, 
all application <emweb_string> and <emweb_include> code fragments and 
evaFoxmserve_* and evaFoxmsubmi t_* functions are invoked from the 

evsNetHTTPReceiveO function. 

If the internal scheduler is to be used, HTTP requests are served from the following 
function: 

EvsStatus ewsRun ( void ) ; 

This function returns ews_statos_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). All 
application <emweb_string> and <emweb_include> code fragments and 
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evaFortnServe_« and ewaForir.Submi c_« functions are invoked from ewsRunO. 

The ewsRuno function processes any outstanding HTTP requests until either all 
requests have been served, or the application requests that Em Web/Server yield the 
CPU as follows. Each time Em Web/Server sends a buffer of HTTP response data to 
the network via the application-provided evaNecHrrpsend function, the application 
may return the status ewa_status_ok_yield to request that the EmWeb/Server 
relinquish control of the CPU. This will cause the EmWeb/Server to return from the 
ewsRun ( ) function immediately. (Note that if the last buffer of the HTTP response was 
transmitted, the EmWeb/Server will close the connection and release any 
corresponding resources before returning control to the application). 

dn addition, the internal scheduler gives the application a means to temporarily 
^suspend a specific HTTP request each time it invokes application-specific code from 
<emweb_string>, <emweb_include> , and HTML form serve and submit functions. The 
application may instruct EmWeb/Server to suspend an HTTP request from the 
application-specific code provided in <ekweb_strimg> and <emweb_include> C code 
fragments, and EwaFormseive_* and EwaFormsubnu c_« functions by invoking the 
following function before returning to the EmWeb/Server. 

EwsStatus ewssuspend ( EwsContexc context ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned (ews_status_bad_state). When the application returns to EmWeb/Server 
after invoking ewssuspend, the EmWeb/Server may continue to process other 
outstanding requests from ewsRunO before returning control to the application Note 
that the value returned by the application after calling ewssuspend is ignored. The 
application's <emweb_string> or <emweb_include> C code fragment or 
evaFormserve_« or ewaFoxmsubmi t_« function is re-invoked when the request is 
resumed. This functionality makes it possible to implement proxy servers (i.e. a local 
HTTP request might cause the application to send an IPC message to another 
process and suspend EmWeb/Server processing of this request until an IPC 
response is received). The application can resume a previously suspended request 
by invoking the following function. 

EvsStacus ewsResuine { EwsContexc context, EwaStatus status ); 

Status can be either ewa_status_ok or ewa_status_ok_yield. If the status is 
ewa_status_ok, then the resumed request may be scheduled right away (for 
example, this could cause ewsRun to be invoked internally). Otherwise the 
suspended request is scheduled to run, but is not actually run until control is 
transferred back to EmWeb/Server. This gives the application control over which 
CPU thread processes HTTP requests (i.e. a suspended request may be resumed 
by an interrupt handler for execution later in a polling loop that calls ewsRun). This 
function returns ews_status_ok on success. Otherwise, an error code is returned 
(ews_status_bad_state) . 
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The following function may be invoked from within the application's <emweb_string> 

or <EMWEB_INCLUDE> C COde fragment or evaFormServej OP evaFoxmSubmi t_* 

function to determine if this is the initial invocation of the application code, or if the 
code is being resumed. 

boolean evsContex tlsResuming ( EwsContext contexc ) ; 

This function returns true if the application code is being re-invoked after 
ewsResume. Otherwise, this function returns false. 

4.1.1.3. Memory Management 

The Em Web/Server requires the application to provide simple memory management 
for the allocation and release of temporary data-structures used throughout the 
processing of HTTP requests and maintaining the run-time document archive and 
authentication databases. These functions are equivalent to the POSIX maiioc and 
free calls as follows: 

void * ewaAlloc ( uincf bytes ) ; 
void ewaFxee ( void * pointer } ; 

The ewaAlloc function (or macro) returns a pointer to available memory of at least 
• the specified number of bytes long.or null if no memory is available. The ewaFxee 
function (or macro) returns a block of available memory previously allocated by 

ewaAlloc. 

Note: If the EmWeb/Server is unable to allocate memory 
during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's evaNetHTTPEnd ( ) function is 
invoked. Alternatively, the application may implement 
ewaAlloc o so as to block until resources are available using 
external operating system facilities. 

4.1.1.4. Time-of-Day Management 

Some of the optional HTTP/1.0 functionality requires a "time-of-day" for Date:, 
Expires:, and Last -modified: headers. Many embedded systems do not have a 
reliable time-of -day capability, so these features are configurable options in Em Web/ 
Server. To take advantage of these features, the application must provide the 
following function (or macro): 

const char * ewaDate ( void ) ; 

This function should return the current time (GMT) in one of the following two 
formats: 

RFC1123: (Preferred) 

Fri, 08 Jun 1996 08:57:28 GMT 
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RFC850: 

Friday, 08-Jun-96 08:57:28 GMT 

4,1.2. Network Interfaces 

The EmWeb/Server relies upon a pre-existing TCP/IP protocol stack available in the 
target software environment. The interface between the application's TCP/IP protocol 
stack and the EmWeb/Server is event driven. This approach makes it possible to port 
EmWeb/Server to a wide variety of software environments. 

-4.1.2.1. Network Buffer Management 

TThe EmWeb/Server design assumes that the application maintains data buffers for 
the reception and transmission of TCP data. 

Buffers can be uniquely identified by an application-defined buffer descriptor. No 
assumptions are made about the actual structure of the buffer descriptors or their 
relationship to the data. For example, a buffer descriptor could be an index into a 
table, a pointer to a structure (either contiguous or separate from the data 
represented), etc. The application is responsible for defining the appropriate type for 
EwaNecBuf f er and a value for ewa_net_buffer_null. 

Buffers can be chained together. Given a buffer descriptor, ErnWeb/Server must be 
able to get or set the "next buffer in the chain" field. This is done by the 

ewaNetBuf ferNextSet and ewaNetBuf ferNextGet functions (or macros). Note that 

the buffer chain is terminated when the next buffer value is ewa_netj3uffer_null. 

EvaNetBuffer ewaNetBuf f erNextGet ( EwaNetBuf fex buffer ) ; 

void ewaNetBuf ferNextSet ( EvaNetBuffer buffer, EwaNetBuffer next ); 

rj Given a buffer descriptor, EmWeb/Server can determine the start of data in the 
-buffer. Additionally, EmWeb/Server may change the start of data in the buffer 
^(EmWeb/Server only moves the pointer to the data upward (increments)). This is 
done by the ewaNetBuffeiDataGet and ewaNetBuf ferDataset functions (or macros). 

uint8 * ewaNetBuf ferDataGet ( EwaNetBuf fer buffer ) ; 

void ewaNetBuf ferDataSec ( EwaNetBuf fer buffer, uint8 *datap ); 

Given a buffer descriptor, EmWeb/Server can determine the size of contiguous data 
in the buffer. Additionally, EmWeb/Server may change the size of the buffer 
(EmWeb/Server only changes the size of the buffer downward (decrements)). This 

is done by the ewaNetBuff erLengthGet and ewaNetBuf ferLengthSec functions (or 

macros), 

uintf ewaNetBuf f erLengthGet ( EwaNetBuffer buffer) ; 

void ewaNetBuf ferLengthSet ( EwaNetBuffer buffer, uintf length ); 
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ErnWeb/Server may aJiocate a single buffer by invoking the ewaNetBuffeiAiioc 
function (or macro). The application may return a butter of any size to EmWeb/ 
Server. The size of the buffer must be initialized to the number of bytes available in 
the buffer for EmWeb/Server. If no buffers are available, this function returns 
ewa_netj3UFF£R_nui.l. Additionally, EmWeb/Server may release a chain of one* or 
more buffers by invoking the ewaNetBuf fexFiee function (or macro). 

EwaNetBuf f ex ewaNetBuf f erAlloc ( void ) ; 
void ewaNetBuf fexFxee (EwaNetBuf f ex buffer); 

Note: If the EmWeb/Sen/er is unable to allocate a network 
buffer during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewaNetBuffeiAiioco so as to block until resources are 
available using external operating system facilities. 



4.1.2.2. TCP/IP Interfaces 

The application is responsible for listening to the HTTP TCP port (80) for connection 
requests. When an HTTP TCP connection request is received, the application 
accepts the TCP connection on behalf of EmWeb/Server and invokes the following 
function: 

EwsContext ewsNe CHTTPS tar t ( EwaNetHandle handle ) ; 

This function returns a new context handle which the application is expected to use 
when referencing this HTTP request for future operations. The value 
ews_context_nui.l is returned on failure (e.g. no resources available to handle the 
new request). The handle parameter is application-defined and is returned to the 
application unchanged by the EmWeb/Server in other network interface calls as 
illustrated below. The handle is also made available to <emweb_string> and 

<EMWEB_IKCLUDE> C code fragments and ewaFoxmServe_* and ewaFormSubmit_* 

application functions by invoking the following function: 

EwaNetHandle evsContextNetHandle ( EwsContext context ) ; 

At any time, the application can abort an uncompleted HTTP request by invoking the 
following function: 

EwsStatus ewsNetHTTPAbort ( EwsContext context ) ; 

This function is typically invoked by the application to notify EmWeb/Server that the 
corresponding TCP/IP connection has been disconnected. The function returns 
ews_status_ok on success. Otherwise, an error code - is returned. (There are 
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currently no conditions that cause an error to be returned). 

As data buffer(s) are received from the network on a TCP connection corresponding 
to an HTTP request, the application passes these buffers to the EmWeb/Server by 
invoking the following function. 

EwsScacus evsNetHTTPReceive (EvsContext context, EvaNetBuffer buffer); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). The 
buffer parameter describes a chain of one or more buffers containing raw TCP data. 
The structure of the buffers is determined by the application, and the application 
-provides EmWeb/Server with functions to manipulate these buffers as defined 
previously. Note that EmWeb/Server takes responsibility for releasing received 
buffers when they are no longer needed, and may hold on to buffers containing 
certain HTTP request headers for the duration of the request. 

When EmWeb/Server has assembled one or more buffers for transmission, it 
invokes the following function (or macro) which must be provided by the application: 

EvaStatus ewaNe tHTTPS end { EwaNe tHandle handle, EwaNetBuffer buffer ); 

This function transmits (and then releases) a chain of one or more network buffers 
and returns ewa_status_ok or ewa_status_ok_yield on success, or 
ewa_status_error on failure. If the application returns ewa_status_ok, ErnWeb/ 
Server will continue processing outstanding requests in a round-robin fashion. If the 
application returns ewa_status_error, EmWeb/Server will abort the current request 
(as if ewsNetHTTPAbort o was called) and continue processing any other outstanding 
requests. The application returns ewa_status_ok_yieu> to request that ErnWeb/ 
Server give up the CPU. In most cases, ewaNe tHrrpsendo is called for each buffer's 
worth of HTTP response data generated by the EmWeb/Server. Thus, the CPU used 
by the server can be throttled by adjusting the buffer size available to the server and 
rising the ewa_status_ok_yield return code. (See 4.1.1.2. Scheduling, page 29). 
Note that use of this return code requires that the application eventually either 
reschedule processing of the request by invoking ewsRun, or abort the request by 

invoking ewsNetHTTPAboiC. 

The application may signal the EmWeb/Server with flow control events to indicate 
congestion on an outbound TCP connection. If a TCP connection's transmit window 
is full, the application may call the following function at any time: 

Ewsstacus ewsNetFlowConcrol ( EwsContext context ) ; 

This will cause the EmWeb/Server to temporarily suspend processing of the request. 
When the TCP connection's window opens again, the application may invoke the 
following function at any time to notify EmWeb/Server that processing of the request 
may continue: 
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Ewsscatus ewsNetUnFlowContxol ( EvsConcexc context) ; 

If ewsKetFiowconcroi o is called from the ewaNecHTTPsendo function, then the 
application is responsible for transmitting the current buffer. However, 
evaNetKTTPsendo will not be called again until the application has called 
evsNetunFiovcontioi o . Note that if evsNecriovcontroi o is invoked from outside 
ewaNetHTTPSendo , then EmWeb/Server may call evaNetHrrpsendo once before 
suspending the request In any case, the application should be prepared to receive 
notification of request completion as described below. 

When the EmWeb/Server has completed processing an HTTP request, or if the 
application aborts an outstanding HTTP request by invoking ewsNe tHTTPAbor to, it 
invokes the following function which must be provided by the application: 

EwaStatus evaNetHTTPEnd ( EwaNetHandle handle ) ; 

This function should close the TCP connection corresponding to the request and 
return ewa_status_ok or ewa_status_ox_yield on success or ewa_status_erkor on 
failure. Note that returning ewa_status_ok_yield causes EmWeb/Server to give up 
the CPU. Otherwise, EmWeb/Server may continue processing other HTTP requests 
in progress. 

If persistent connections are used, it is possible that several HTTP requests will be 
handled over a single TCP/IP connection. For some applications, it is necessary to 
reset application-specific state information and to release application-specific 
dynamic resources after each HTTP request. The following function may be 
provided by the application for this purpose: 

void evaNetHTTPCleanup ( EwaNetHandle handle }; 

This function must be provided by the application or defined as a empty macro. It is 
invoked by EmWeb/Server when a request completes, allowing the application to 
reset any processing state stored in the network handle. Note that for persistent 
connections, this routine may be called several times for the same connection, as 
one connection can be used for multiple requests. This routine will be called before 

evaNetHTTPEnd () is invoked. 

The EmWeb/Server must have access to an application-provided null-terminated 
character string representing the HTTP network location (e.g. 
B www.agranat.com:80 rt . Note that the host name (left of the ':') may be a dotted 
decimal IP address. Also note that the ^port-number^ may be omitted if the 
standard HTTP TCP port #80 is used. This string is returned by the following 
application-provided function (or macro). 

const char • evaNetLocalHostName ( EwsContext context ); 
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4.1.3. Document and Archive Management 

The ErnWeb/Compiler generates an archive of one or more documents. Documents 
can be HTML files, JAVA programs, graphical images, or any other information 
resource addressable by a URL Archives may be independently loaded or unloaded 
into the Em Web/Server. 

In most applications, the entire set of available documents are compiled into a single 
archive and loaded at boot time. However, some applications may desire to 
dynamically load archives at run-time as needed in order to reduce memory 
requirements. In fact, applications may implement a scheme similar to virtual memory 
page swapping under some operating systems to cache an active set of documents in 
memory while storing other documents in a secondary storage area. Such a 
secondary storage area could be in FLASH memory, disk, or on a remote server using 
TFTP or other protocols to load documents at run-time. 

An EmWeb archive consists of two components. First, there is the archive data 
component containing the database of compressed documents, information about 
how to construct dynamic documents at run-time, access controls, etc. Second, there 
is the archive object component containing the run-time object code used for the 
construction of dynamic documents, etc. 

Operating systems supporting the run-time loading and linking of object code may off- 
load both the data and object archive components to a secondary storage area. 
Otherwise, only the data components are off-loaded while the object components are 
statically linked into the run-time executable image. 

Each archive contains an archive descriptor in the object component. The archive 
descriptor is referenced by a public symbol generated by the EmWeb/Compiler. 

4.1.3.1. Installing and Removing Archives 

Hn order to activate an archive at run-time, the application must invoke 
-evsDocumencinscaiiAichive with parameters indicating the address of the data 
component and the archive descriptor of the object component. 

EwsScacus ewsDocumentlns ca llAr chive 

( EwsArchive descriptor, const uint8 *datap ); 

This function may return one of the following status codes: 

EWS_STATUS_OK The archive vas installed successfully 

EWS_STATUS_BAD_MAGIC The data or object portion of the archive is 

invalid or corrupt. This may happen if the 
EmWeb/Server is configured for a big-endian 
archive when the EmWeb/Compiler generated a 
little-endian archive, or vice versa. 

EWS_STATUS_BAD_VERSION The archive generated by the EmWeb/Compiler 

is not understood by the EmWeb/Seivei. 

EWS STATUS ALREADY EXISTS The archive has already been installed. 
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EWS STATUS NO RESOURCES 



EWS STATUS IN USE 



The archive contains a document with a URL 
that has been previously loaded from a 
different archive. 

Insufficient dynamic memory is available to 
install the archive. 



The archive may be deactivated by invoking ewsDocumentRemoveAr chive. 



EwsStatus ewsDocumentRemoveAr chive < EvsAr chive descriptor ) ; 

These (unctions return ews_status_ok on success. Otherwise, ew_status_in_use is 
returned indicating that the archive contains documents that are either being 
processed by outstanding HTTP requests or that have been cloned to other URLs. 

The fixed data component of an archive contains the name of the archive and the 
date it was created by the EmWeb/Compiier. These values may be retrieved as 
follows: 

const char * ewsDocumentArchiyeName ( const uint8 *datap ) ; 
const char * ewsDocumentArchiveDate < const uintS * da tap ) ; 
const char * evsDocumentArchiveDa tei036 ( const uint8 *datap ); 

4.1.3.2. Demand Loading 

In order to implement on-demand archive loading, the application may register 
document URLs with the EmWeb/Server which are valid but not loaded. This is done 
by invoking the following function: 

EwsDocument 

ewsDocumentRegister (const char *uxl, EwaDocumentHandle handle); 

This function returns an EmWeb/Server document descriptor of type EwsDocument, 
or ews_document_null on error. The handle is an application-defined value passed 
back unchanged to the application in ewaDocumentFauit as shown below. 

If a registered document is requested by a Web browser, then EmWeb/Server 
notifies the application by invoking the following application-provided function: 

EwaStacus 

ewaDocumentFauit ( EvsContext context, EwaDocumentHandle handle ); 

At this point, the application may load a new archive (possibly removing a previously 
installed archive to make room). When the archive containing the page is installed, 
the EmWeb/Server automatically completes processing the request when the 
archive is loaded. The request can be aborted either immediately by returning 
ewa_status_error from the ewaDocumentFauit function, or by invoking 

evsNetKTTPAbort. 

Once a document is registered, there is no need to re-register it in the event that the 
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corresponding archive is removed. EmWeb/Server remembers that the document 
has been registered as dynamically loadable. However, the application may de- 
register a document by invoking the following function: 

EwsStacus evsDocucnentDeregister ( EwsDocumenc document ) ; 

This function returns ews_status_ok on success. Otherwise, ews_status_in_use is 
returned indicating that the document was cloned or not registered. 



4.1.3.3. Cloning 

Documents may be cloned and assigned to a new URL This allows multiple 
instances of a document to exist while minimizing the storage requirements. An 
application-specific handle can be used to identify an instance of a document from 
the request context. 

The application clones a document by invoking the following function: 

EwsDocumencewsDocumencClone 
( const chaz *baseurl, const char -newuii, EwaDocumen tHandle handle ); 

This function returns a document descriptor for the . clone, or ews_docukent_null on 
error. 

The cloned document may be removed by invoking the following function: 

EwsStatus ewsDocumentRemove ( EwsDocument document ) ; 

This function returns one of the following status codes: 

EWS_STATCJS_OK The document was successfully removed 

EWS_STATUS_N0T_CLONED The document is not a clone. 

EWS_STATUS_IN_USE The document is itself cloned. The clone of 

the clone must be removed first. 

All clones created from documents in an archive must be removed before the archive 
can be removed. 

Note that the application's document handle is made available to the application in 
the HTTP request context by invoking the following function: 

EwaDocumentHandle ewsContextDocumentHandle ( EwsContext context ) ; 

If the document corresponding to the context was not cloned or registered by the 
application, then this function returns ewa_document_handle_null. 

4.1.3.4. URL Rewriting 

In some applications, it may be desirable to translate between URLs advertised to 
the outside world and URLs configured in the archive. The optional URL hook feature 
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provides the application with an opportunity to rewrite a requested URL before 
EmWeb/Server looks up the URL in its archive database. The following function (or 
macro) may-be provided by the application for this purpose: 

char * ewaURLHook ( EvsContext context, chai * url ) ; 

This function passes the requested URL and request context to the application. The 
application may simply return uri if no rewriting is desired, or it may return an 
absolute local URL to substitute. The returned URL is looked up in the archive and 
served as if requested directly. If the application returns null, the request is aborted. 

This functionality is Intended to allow the application to select a subdirectory of 
documents based upon requested language, content encodings, and other 
information available from the request context. 

Note that this function may rewrite and return any portion of the uri string parameter 
(provided that the string's length is not increased), or return a completely different 
string buffer instead. If a different buffer is used, the server copies the value 
immediately. 

4.1.3.5. Document Data Access 

In some applications, it may be desirable to access the content of a file pointed to by 
a URL directly (e.g. data files used by CGI scripts, etc.). The following function is 
optionally provided by the EmWeb/Server to the application for this purpose: 

EwsStatus evsDocunientDa ta 

( const char * uxl, uint32 *bytesp, const uint8 **datapp ); 

This function looks up the requested URL and, if found, updates ^bytesp and 
*datapp with the length and pointer to the start of raw data in the file. (Note that the 
data is compressed if compression is enabled). Since EmWeb employs a proprietary 
compression technique, the application should specifically disable compression of 
files it wishes to access this way by using the nocompress attribute in the appropriate 
_access file (see 3.4. ^ACCESS Files, page 22). This function returns ews_status_ok 
on success, or ews_statusjnot_found on failure. 

4.1 A Authentication and Security 

HTTP Authorization techniques are discussed in the HTTP specifications (see 7. 
References, page 87). Knowledge of these principles is essential for correct use of 
these authorization interfaces. 

One or more HTML documents can be associated with a single "realm". A realm is a 
case-sensitive ASCII string that defines a "protection space" for the associated 
document(s). 

Each realm may have zero or more authentication entries associated with it. If a realm 
has no authentication entries, then documents in that realm are not accessible. 
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A ciient that attempts to access a document associated with a non-null realm is 
required to authenticate itself. To authenticate, the ciient must send authentication 
parameters valid for at least one authentication entry for that documents realm. 
Clients that do not authenticate are denied access to the requested document. 

For example, assume a realm exists called n foo\ it has three authentication entries 
associated with it (two using the "basic cookie" scheme defined in the HTTP/1.0 
specification, and one using the "digest* 1 scheme defined in the HTTP/1.1 
specification): 

REALM: "foo 41 

Authentication Entry 1: 
Type: "basic" 

parameters: Username- "useil M 
Pas sword- "guest" 
EwaAuthHandle : application' s entryl identifier > 

Authentication Entry 2: 
Type: "digest" ■ 
parameters: Username»"user2 " 

Passvord«"837I8U9" 

Diges tRequired-FALSE 
EwaAuthHandle: Application's entry2 identified 

Authentication Entry 3: 
Type: "basic" 

parameters : Username-"sinclaii " 

Pa s swo r d « " baby Ion" 
EwaAuthHandle: <application ' s entry3 identified 

When a client attempts to access a document associated with realm "foo n , it needs to 
authenticate against one of the above entries. Which one the client authenticates 
against is at its discretion. 

When a ciient does authenticate against one of the above entries, the EwaAuthHandle 
for that entry is stored in the current context for the HTTP request (Ewscontext). The 
datatype of this EwaAuthHandle is implementation-defined. 

The following types are defined for the authorization application interface (from sic/ 
include/ews_auth.h): 

/* 

* Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they are supported. 
•/ 

typedef enum 
{ 

e w s Au thS chemeBa sic, 

ewsAuthSchemeDigest, 

e w s Au t hS chemeManua IBa s i c , 

ewsAuthSchemeManualDigest, 



WO 98/06033 
TM 

EmWeb Functional Specification 



Copyright Q1997 Agranat Systems, Inc. Page 40 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 ■■ PCT/US97/13817 
EmWeb 1 M Functional Specification Confidential EmW^b/Servdr 



ewsAuthMaxScheme /* count of supported schemes */ 

} EwsAuthScheme; 

/• 

* this structure defines parameters for all the supported 

* authorization types. New parameters will be added in 

* to this structure in the future 
*/ 

typedef union 
{ 

tfifdef EW_CONFIG_OPTION_AUTH_BASIC 
struct 
{ 

char "useiName; 
char *passWord; 
) basic; 

tfendif /* EW_CONFIG_OPTION_AUTH_BASIC •/ 
#ifdef EW_CONFIG_OPTION_AUTH_DIGEST 
struct 

{ 

char *userName; 
char ^password; 

« ifdef EW_CONFIG_OPTION_AUTH_DIGEST_M 

boolean diges tRequired; /* require message data verification */ 
# endif /* EW_roNFIG_OPTION_AUTHJDIG£ST_M •/ 

} digest; 

# endif /* EW_CONFIG_OPTION_AUTH_DI QEST •/ 

char reservedi; 
} EwsAuthParameters; 

/* 

* This structure represents a single authorization entry. 
•/ 

typedef struct 
{ 

EwsAuthScheme scheme ; 
EwsAuthParameters params; 

EwaAuthHandle handle; /* user defined •/ 

} Ews Au thor i za t i on ; 

An authorization entry may be created by invoking the following function: 

EwsAuthHandle ewsAuthRegis ter 

( const char *iealm, const EvsAuthor ization ""authorization ) ; 

This function returns an Em Web/Server authorization handle which corresponds to the 
authorization entry, or ews_auth_handle_null on failure. The entry contains the triplet 
(authorization scheme (e.g. basic cookie), scheme-specific parameters (e.g. user and 
password), application-specific authorization handle). 

The application-specific authorization handle corresponding to the authentication 
validating a particular HTTP request is available from the context as follows: 
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EwaAuchHandle ewsConcextAu chHandle ( EwsCorxcext context ) ; 

The application may remove a previously registered authorization handle by invoking 
the following function: 

EwsStatus ewsAuthRemove ( EwsAu thHandle authorization ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is returned 
(there are presently no conditions that result in error). 

By default, documents assigned to a non-null realm are protected and may only be 
accessed by authorized users. It may be desirable to enable or disable a realm's 
access controls. The following function disables access control for a realm making 
documents assigned to the realm accessible to everyone. 

EwsStatus ewsAuthReaimDi sable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_bad_realm if the realm 
was not defined by any loaded archives. 

The following function enables access control for a realm making documents assigned 
to the realm protected. Protected documents may only be accessed by authorized 
users. 

EwsStatus ewsAuthRealmEnable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_badjrealm if the realm 
was not defined by any loaded archives. 

The following function (or macro) must be provided by the application. The function is 
invoked by ErnWeb/Server to get a realm qualifier string from the application. The 
qualifier string is concatenated with the base realm name in authentication protocol 
messages such that browsers may differentiate between realms of the same name 
appearing in multiple servers. 

const char *evaAuthRealmQualif iei ( void ) ; 

The application would typically return the string "©hostname", where hostname is the 
server's local host name or IP address. The application may return null if no qualifier 
is desired. 

4.1.4.1. Basic Authentication 

The Basic authentication scheme requires the browser client to transmit a Base64 
encoded username and password to the server for authentication. While no less 
secure than SNMP v1 , Basic authentication is vulnerable to network monitoring and 
replay attacks. 

The authentication parameters for Basic authentication are simply the usemame and 
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password represented as null-terminated character strings. 
4.1.4.2. Manual Basic Authentication 

For some applications, it may be impossible to obtain the Basic authentication 
usemame/password pair prior to receiving requests for a document. Instead, the 
Basic authentication username/password may be stored in a remote secure 
database. This database would need to be queried for the username/password as 
each request requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthSchemeManuaiBasic. This scheme is available only if the build option 
ew_config_option_auth_mbasic is defined. Once defined, the application must 
provide the following interface: 

boolean ewaAuthCheckBasic (EvsContexc context 

, const char •realm 
, const chai *basicCookie 
, const chai *useiNatne 
, const chai *passwoid ); 

The evsAuthschemeManuaiBasic scheme can be registered for any realm by using 
the ewsAuthRegiscei function. The scheme field of the EvsAuthoxization parameter 
must be set to evsAuthschemeManuaiBasic, and the application handle can be set in 
the handle field. The params field is not used by the manual basic scheme. Manual 
basic can only be registered once per realm. If there are M non-manuaI n 
(evsAuthschemeBasic) Basic authorization entries registered to the same realm as a 
manual Basic entry, the "non-manual" authorization entries will be given preference. 
If no "non-manual" authorization entries match the request, then ewaAuthCheckBasic 
will be called. 

The Ern Web/Server will invoke the application's ewaAuthCheckBasic function when 
authenticating a request for a realm protected by the manual basic scheme, unless 
a "non-manual" basic authorization entry matched. The application's 
ewaAuthCheckBasic function must now determine whether or not the authorization is 
valid. This function is passed the context, requested document's realm, and the 
base64-encoded basic cookie from the Authorization header (as specified in RFC 
2068). If the build option ew_config_option_aoth_mbasic_decode is defined, then 
userName and password will point to the username/password strings decoded from 
the basiccookie, otherwise these pointers are null. All strings are null terminated, 
and should not be modified by the application. 

The return value from ewaAuthCheckBasic determines how the server will respond to 
the request. If false is returned, access will be denied. If true is returned, access 
will be granted . 

Optionally, the application can suspend the context from within ewaAuthCheckBasic 
using evssuspend. EmWeb/Server will ignore the return value in this case. When the 
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context is later resumed by ewsResume, the evaAuthchecksasic function will be 
reinvoked by EmWeb/Server. 

The application may abort the context from within ewaAuchcheckBasic by calling 

ewsNetHTTPAbor t. 



4.1.4.3. Digest Authentication 

The Digest authentication scheme challenges the browser client using a "nonce" 
value. The client responds with a valid cryptographic checksum of the username, 
secret password, the given nonce value, the HTTP request method, and the 
requested URI. This avoids sending the secret password over the network. 
Furthermore, by generating unique nonce values, the server can make replay and 
other forms of attack impractical. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 

Note: Digest authentication is currently an internet proposed 
standard and is not yet supported by many browsers. 

The authentication parameters for Digest authentication include the usemame and 
password represented as null-terminated character strings. In addition, one 
additional boolean parameter is defined as follows: 

digestRequired 

If true, the EmWeb/Sen/er will require that the client provide a valid 
message digest to prevent forgery of the request message. This requires 
significantly more computation and is not supported by most browsers. 

The application is required to define the application-specific structure called 
EvaAuthNonce. The EwaAuthNonce structure is application-specific and contains 
parameters to be used in calculating (via MD5 hash of the structure's contents) a 
unique nonce value. We recommend including the client's IP address, ttmestamp, a 
server-wide secret key, and any other random bits the application desires. 

Two additional functions must be provided by the application for the generation and 
verification of nonce values as follows: 

First, the ewaAuthNoncecxeate o function is called by EmWeb/Server in response to 
an unauthenticated request for a document to request that the application initialize 
the EwaAuthNonce structure. 

void 

evaAuthNonceCzeate 

(EvsContext context 

, const char *realm 

, EwaAuthNonce *noncep ); 
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The application should initialize the EwaAuthNonce structure. The request context 
and realm are provided as inputs. For example, a typical application could read the 
application-specific network handle from the request context to determine the client's 
IP address. 

Second, the ewaAuchNoncechecko function is called by Em Web/Server in response 
to a client's request to authenticate against a nonce value previously initialized by 

the application in ewaAuchNonceCreateO . 

typedef enum EwaAu thNonceStatus__e 
{ 

ewaAu thNonceOK, /* nonce value valid for request */ 

ewaAu thNonceLastOK, /* nonce value valid, but won't be again */ 

ewaAu chNonceS tale, /* nonce value is stale, generate new nonce •/ 

ewaAu thNonceDenied /« nonce value is invalid •/ 
} EwaAu thNonceStacus ; 

EwaAu thNonceStatus 
ewaAu thNonceCheck 

(Ewscontext context ■ 

, const chai • realm 

, EwaAuthNonce *noncep, uintf count ); 

This function is called by EmWeb/Server to verify that the nonce is valid for the 
current request. The count parameter indicates the number of times this nonce has 
been used previously (i.e. zero on the first call). The application may decide to 
accept the nonce by returning ewaAu thNonceOK or ewaAu thNonceLastox. The 
ewaAuthNonceLastoK is used to signal to the server that the nonce value is valid this 
time, but will not be valid if used again. The server uses this information to generate 
a new nonce and pass a next nonce value to the browser to be used on the next 
request. Otherwise, the application may decide to expire the nonce (because it has 
been used too many times, because too much time has gone by since it was created, 
or any other reason that the application decides) by returning ewaAu thxoncestaie, or 
refuse to authenticate (because the client IP address doesn't match) by returning 

ewaAu thUonceDenied. 

4.1 A4. Manual Digest Authentication 

For some applications, it may be impossible to obtain the digest authentication 
username/password pairs prior to receiving requests for a document, instead, the 
digest authentication username/password may be stored on a remote server. This 
server would need to be queried for the username/password as each request 
requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthschetneManuaiDigest. This scheme is available only if the build option 
ew_config_option_auth_mdigest is defined. Once defined, the application must 
provide the following interface: 
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boolean evaAuthCheckDiges c < EwsConcex: contexc 

, const char *iealm 
f consc EwaAuchNonce *noncep 
, const chai *userName 
r consc char ••digest ); 

The ewsAuthschemeManuaioigest scheme can be registered for any realm by using 
the ewsAuthRegistex function. The scheme field of the EwsAucnorization parameter 
must be set to evsAutnschemeManuaiDigest, and the application handle can be set in 
the handle field. The params .digest. digestRequiied flag may be used if the 
ew_configjdption_auth_digest_m build option is defined. All other parameters are 
not used by the manual digest scheme. Manual digest can be registered once per 
realm. If there are 'non-manual" (evsAutnscnemeDigest) digest authorization entries 
registered to the same realm as a manual digest entry, the "non-manual" 
authorization entries will be given preference. If no •non-manual" authorization 
entries match the request, then evaAutncheckDigest will be called. 

The EmWeb/Server will invoke the application's evaAutncheckDigest function when 
authenticating a request for a realm protected by the manual digest scheme, unless 
a n non-manuar digest authorization entry matched. The application's 
ewaAuthcheckDigesc function must now determine whether or not the authorization 
is valid. This function is passed the context, the requested document's realm, the 
nonce associated with this request, and the usemame as it appears in the request. 
All strings are null terminated, and should not be modified by the application. 

evaAutncheckDigest returns a boolean status that determines how the server will 
respond to the request. If false is returned, access will be denied. If true is returned, 
the ^digest parameter has been set to a null terminated string containing the ASCII 
string representation of the MD5 checksum of the usemame, realm, and password 
strings. This is referred to the H(A1) value in RFC 2069. For example, if the 
username is "user', password is "password", realm is "foo_reaim n , then *digest 
should be set to the string representation of MD5( usenfoo_realm:password ), which 
would be: 

•digest - M eaf d9339dOH4 895926c24ec79af 7211*' 

The ^digest value is used by the server to validate the response digest and entity- 
digest that are present in the request's Authorization header. If the validation does 
not pass, access will be denied. The memory used by the *digest value will remain 
referenced by the server until the context of the request is freed. 

Optionally, the application can suspend the context from within evaAutncheckDigest 
using ewssuspend. The return value will be. ignored. When the context is later 
resumed with ewsResume, the evaAutncheckDigest function will be reinvoked. 

The application may abort the context from within evaAutncheckDigest by calling 

evsNetHTTPAbort. 
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4.1.4.5. Application Security Verification 
Some applications may provide their own proprietary form of client authentication. 
These proprietary methods will vary from application to application. For example, an 
application could use the client's IP address to restrict the client's access to certain 
realms. 

EmWeb provides a generic interface that allows an application to provide any 
proprietary checks on the request context and requested realm. This interface 
allows the application to deny service to the client if so desired. 

This interface is made available by defining the ew_config_option_auth_verify 
build option. The application must then provide the following interface: 

boolean ewaAuthVeiifySecuri cy ( EvsContext context 

, const char •realm ); 

This function is called by EmWeb/Server after the current request has passed the 
standard authorization procedures described above. For example, if basic 
authentication is enabled on a realm, ewaAuthvexif ysecuri cy will be called only after 
the basic authentication successfully completes. If digest authentication is used, 
then evaAutnveiifysecuii ty is called after the response digest is successfully 
verified, but before the entity-digest is checked (if the 
ew_config_option_auth_digest_m build option is turned on). 

evaAutnveiifysecuii ty is passed the current context, and a pointer to a null 
terminated string containing the realm. The application can allow the request to 

Complete by returning TRUE from evaAutnveiifysecuii ty. If evaAutnveiifysecuii ty 

returns false, the request is denied access. 

ewaAuthveiifysecuiity is provided only as a secondary security mechanism, and 
can only be used in conjunction with a defined standard security scheme, such as 
basic or digest. 

Optionally, the application can suspend the context from within 
ewaAuthveiifysecuiity using evssuspend. The return value will be ignored. When 
the context is later resumed, the evaAuthverifysecurity function will be reinvoked. 

The application may abort the context from within evaAutnveiifysecuii cy by calling 
ewsNetHTTPAbort. 

4.1.4.6. Document Realm Assignment 

The authentication realm of a document is typically determined from the _access 
configuration files by the Em Web/Compiler. However, it may be desirable to change 
the documents realm assignment at run-time. The following function is optionally 
provided by the EmWeb/Server to the application for this purpose: 

EwsStatus evsDocumentSetRealm ( const chai *uil, const chai •iealm ); 
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This function returns ' ews_status_ok on success, or ews_status_not_found if the 
specified local URL is not installed, or ews_status_no_resources if insufficient 
resources were available to create a new realm. 



4.1.5. Request Context Access 

Each HTTP. request received by the EmWeb/Server is assigned a unique context. A 
context handle of type Ewscontext is first returned to the application from the 

evsNetHTTPStart function. 

Application code responsible for the run-time content of HTML documents (i.e. C code 
fragments from <emweb_string> and <emweb_include>, HTML form processing 
functions ewaFormserve_* and ewaFormsubmi t_* , and raw CGI interface functions 
evacGistarc_* and evacGiData_*) have access to the corresponding HTTP request 
context. In the case of <emweb_string> and <emweb_include> C code fragments, the 
context is available from the local variable symbol ewscontext. In the case of the form 
and raw CGI processing functions, the context is passed as a parameter. 

Several context access functions are defined which can be called by the application to 
extract information about the current context. For example, the function: 

EwaNetHandle evsContextNetHandle ( EwsContext context ) 



Returns the network handle corresponding to the HTTP context that was passed by 
the application to the EmWeb/Server in the ewsNetHrrpstar t function. The following 
table lists these context access functions: 



Context Access Function 


Description 


ewsContextNetHandle 

ewsContextNetHandie ( EwsContext context ) ; 


Returns the network handle that 
was passed by the application to 
EmWeb/Server in the ewsiietHTTP- 
start function. 


EwaTtocument Handle 
ewsContextDocurnentHandle 
( EwsContext context ) ; 


Returns the document handle that 
was passed by the application to 
EmWeb/Server in either the ews- 

DocumentRegi s tei Or ewsDocutnent • 

clone functions, or 

EWAJDOCUMENTJiANDLE_NULL. 


EwaAuthHandle 
ewsContextAuthHandle 
( EwsContext context ) ; 


Returns the authorization handle 
that was passed by the application 
to EmWeb/Server in the ewsAu- 

thRegister function, or 
E WA_AUTH_HAND LE_NULL. 
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Context Access Function 


Description 


boolean 

evsContextlsResucning 
{ EwsContext context ) ; 


Returns true if this is the first appli- 
cation call-out after a suspended 
request was resumed by calling 
evsResume. Otherwise, returns 

FALSE. 


uint32 

evsContextltexations 
( EwsContext context ) ; 


Returns the iteration count (start- 
ing with zero) to an 

<£MWEB_STRING> Or 

<emweb_include> C code fragment 
with the emweb_iterate attribute 
specified. 


uintf 

ewsContextDa te ( EwsContext context, 
char -datap, uintf length ) ; 


Copies the HTTP Date : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

evsContextPxagma ( EwsContext context, 
chai "datap. uintf length ) ; 


Copies the HTTP pragma : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

evsContextFroro ( EwsContext context, 
char *datap, uintf length ) ; 


Copies the HTTP From; header 
into the buffer provided by the. 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextl f Modi fiedsi nee 

( EwsContext context, char * da tap, uintf 

length ) ; 


Copies the HTTP If -modified-' 

since: header into the buffer pro- 
vided by the application and 
returns the actual number of bytes 
present. 


uintf 

evsContextRef erer ( EwsContext context, 
char «datap, uintf length ); 


Copies the HTTP Ref exex : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextUsexAgent ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP Usei - agent : 

value into the buffer provided by 
the application and returns the 
actual number of bytes present. 
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Context Access Function 


Description 


uintf 

ewsContextHost ( EwsContext context, chai 
•dacap, uintf length ); 


Copies the HTTP Host: value into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present. 


uintf 

ewsCGIServerProtocol ( EwsContext context, 
char *datap, uincf length ); 


Copies the HTTP server protocol 
"http/i . o n or "http/o . 9 B into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


uintf 

evsCGIRequestMethod ( EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP request method 
"get", "head", or "post" into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


const char * 

ewsCGIPathlnf o ( EwsContext context ); 


Returns pointer to CGI extra path 
information if present, or NULL. 


const char * 

ewsCGIScriptName ( EwsContext context ); 


Returns pointer to URL base path 
string. 


uintf 

ewsCGIQueryS tr ing { EwsContext context, char 
•datap, uintf length ); 


Copies the URL query string into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present. 


uintf 

ewsCGIContentType ( EwsContext context, char 
*dacap, uintf length ); 


Copies the HTTP Content - type: 

value into the buffer provided by 
the application and returns the 
actual number of bytes present. 


uintf 

evsCGIContentLength ( EwsContext context ); 


Returns the value of the HTTP 
content - length : header or zero if 
not present. 


uintf 

ewsCGIContentEncodingC EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP Content -encod- 
ing: value into the buffer provided 
by the application and returns the 
actual number of bytes present. 


Note that the context access functions that copy values into application-provided 
strings return the actual number of bytes in the value. If the value is not present, then 
these functions return zero. These functions do not overwrite the application buffer 
(i.e. the length parameter shall be honored by Em Web/Server). However, the function 
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may return a number greater than the length if the application buffer was not large 
enough to accommodate the value. In fact, the length parameter of zero may be used 
to determine the size of the buffer needed. 

4.1.6. Raw CGI 

We believe that one of the greatest features of EmWeb/Server is that the system 
integrator can implement nearly any embedded Web-based application without using 
CGI. 

While Agranat Systems strongly discourages its use, we recognize that some highly 
sophisticated applications may require a raw CGI interface, and so we provide one. 

A URL corresponding to the base name of a CGI script may be specified in the _access 
file which is processed by the EmWeb/Compiler. The application must provide two 
functions for each CGI script with names derived from the value of the cgi » symbol 
directive in the ^access file as follows; 

EvaCGIHandle evaCGIStar t_sy/nbcJ ( EwsConcext context ) ; 

This function is called by EmWeb/Server when a CGI script is first requested by a Web 
server. The application returns a handle that is passed back to the application in the 
second function: 

void ewaCGIDa ta_symbcJ ( EwaCGIHandle handle, EwaNetBuffei buffer ); 

This second function is called by EmWeb/Server to pass one or more buffers to the 
application containing raw CGI data (i.e. the HTTP message body) as they are 
received from the network. The application is responsible for knowing where the end 

Of data is from the Content • length: header (available from evsCGIContentLength). 
Restriction: The application's evaCGIData_sy/7i£>oi function 

must not attempt to access request header information from 
the request context because the network butfer(s) containing 
request headers may have been discarded. Any information 
needed by the application should be copied and saved during 

e vaCGIS ta x t^symbol . 

The application may generate a standardized HTTP response header by invoking the 
following function: 

EvsS tatus evsCGISendS tatus 
( EwsContext context, const char * status, const char *stxing) ; 

This function sends an HTTP status line for the appropriate HTTP version. The status 
argument must contain a null-terminated character string containing a three-digit 
HTTP status code followed optionally by descriptive status text. If not NULL, the string 
argument contains a null-terminated character string containing additional headers, 
and/or data. This function returns ews_status_ox on success. Otherwise, an error 
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code (ews_status_bad_state or ews_status_no_resources) is returned. Note that if 
ewscGisendstatus is to be used, it must be used only once per request, and must be 
used before calling ewsCGiData . 



For example, to send a simple HTML page: 

ewsCGISendStatus ( context. "200 OK", 
"Content -Type : text/html\r \n" 
"Content • Length : 66 \r \n M 
"\r\n" 

M <HEAD> < TITLE >Example< /TITLE > < /HEAD> " 
M <BODY>This is an example < /BODY > " ); 

The application may send additional headers followed by a message body by invoking 
the following function: 

EwsStatus ewsCGIData ( EwsContext context, EwaNeCBuf fer buffer ) ; 

This function sends the chain of buffers to the Web browser. Note that the application 
must delimit the header and body sections with a blank line sequence in accordance 
with the HTTP specification. To complete the request, the application should invoke 
this function with an ewa_net_buffer_null buffer descriptor. This causes EmWeb/ 
Server to close the connection. This function returns ews_status_ok on success. 
Otherwise, an error code (ews_status_bad_state) is returned. 

Instead of sending headers and data, the application may instruct EmWeb/Server to 
generate a redirect to a specified URL or, if local, serve a local document as a 
response. To send a redirect response to the browser (for a local or remote document) 
the application may invoke the following function: 

EwsStatus evsCGIRediiect ( EwsContext context, const chai • uxl ) ; 

To serve a local document as a response, the application may invoke the following 
function: 

EwsStatus ewsContextSendReply ( EwsContext context, char * uil ) ; 

Note that these functions may not be used in conjunction with ewscGiData or 
ewsccisendstatus. The url parameter may be a relative or absolute URL 

Several CGI environment values are available from the HTTP request context as 
outlined in the Context section above. In addition, the following two functions return 
global server information for conformance with CGI/1 .0: 

const char * ewsCGISeiverSof twaxe ( void ) 

Returns the server software version string, for example n Agianat-Emweb/Ri_o n . 

const char * ewsCGIGatewaylntei f ace ( void ) 
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Returns the gateway interface version string, for example "cgi/i .0". 
4.1.7. Logging Hook 

The application may optionally provide the following function (or macro) for logging 
HTTP events: 

void evaLogHook(EvsContext context, EvsLogStatus status) ; 

This function is invoked by EmWeb/Server at least once for each HTTP request, and 
possibly a second time for certain dispositions after a successful request. Possible 
status values include (from src/inciude/evs_def .h) : 

typedef enurr, EvsLogStatus_e 
{ 

/• 

* 200 Request accepted 
•/ 

EWS LOG STATUS OK, 



* Request dispositions (after successful request) 



EWS_LOG_STATUS_NO_CONTENT . 
EWS_LOG_STATUS_MOVED_PERMANENTLY , 
EWS_LOG_STATUS_MOVED_TEMPORARILY , 
EWS_LOG_STATUS_SEE_OTHER , 

EWS_LOG_STATUS_NOT_MODIFI£D , 



/• 204 no-op form oi ima 
/« 301 link •/ 
/* 302 redirect */ 
/* 303 see other •/ 

/• 304 not modified sine 



401 Unauthorized 



ews_log_status_auth_failed , 
ews_log~status_autk_forgery , 
ews log_status_auth~stale , 
ews_log_status_auth_required , 
ews log"status_auth_digest_reouired, 



/* authorization failed 

/• bad message checksum 

/* authorization nonce s 

/* authorization not pre 

/* message digest not pi 



* 400 Bad Request 
•/ 

EWS_LOG_STATUS_BAD_REQUEST , 
EWS_LOG_STATUS_BAD_FORM , 
EWS_LOG_STATUS_BAD_lKAGEMA? , 

/• 

« Additional errors 
•/ 

EWS_LOG_STATUS_NOT_FOUND , . 
EWS LOG_STATUS_METHOD_KOT_ALLOWED , 
EWS~LOG_STATUS~LENGTH_REQUIRED , 
EWSJLOG_STATUS_UNAVAILABLE , 
EWS_LOG_STATUS_NOT_IMPLEMENTED , 



/* HTTP parse error */ 
/• form data parse error 
/* imagemap query parse 



/• 4 04 not found or hidd 

/* 405 method not allowe 

/* 411 length required • 

/• 503 aborted Document 

/* 501 bad method for UR 
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EWS_LOG_STATUS__NO_RESOUKCES , 
EWS LOG STATUS INTERNAL ERROR 



/• 500 insufficient reso 
/• 500 internal eixor •/ 



} EvsLogS tatus ; 



A.i.8. Local Filesystem Interfaces 

The EmWeb Server provides the ability to manage a filesystem on the serving system. 
The Server supports: 

- uploading a file from a client (browser) to the server 

- serving the contents of a file in response to a URL GET 

In both cases, the filesystem is external to the EmWeb Server. EmWeb assumes 
nothing about the implementation of this filesystem; it can exist on a local disk, non- 
volatile memory, or on an external proxy. All EmWeb requires is the ability to: 

- retrieve/set meta-inforrnation about the file (e.g., type, size, modification time, etc.). 

- open a file 

- read a number of bytes from a existing file 

- write a number of bytes to a newly created file 

• dose a file. 

The API that must be supplied to EmWeb to provide these functions is defined below. 
To enable the basic file . support, define the preprocessor symbol 

£W_CONFIG_OPTIONJFILE in ev_conf ig.h. 

4.1.8.1. The EwsFileParams structure 

The EwsFileParams structure is defined in the evs_sys .h include file. It is used by the 
EmWeb server to associate meta-information with a focal file. The EwsFileParams 
structure consists of a union of two substructures. These substructures correspond 
to the file function that EmWeb is to perform. The fiieFieid structure is used when 
the browser is uploading a file to the server via a form post (see RFC1867). The 
fiieinfo structure is used to serve a file in response to a get for a particular URL 
The individual fields for each of these structures is described in the description 
associated file operation. 

cypedef union EvsFileParams_s 

{ 

/• 

* fiieFieid • for support of the form INPUT TYPE-FILE field. 

* The server fills out this structure, and passes it to 

• the application when the file is submitted 
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•/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
struct 

const char •fileName; /• file name or NULL •/ 

const char *contentType; /* MIME type •/ 

const char *contentEncoding; /* content encoding or NULL •/ 
const char *contentEi sposi tion; /* Content -disposition : */ 
int32 contentLength; /* length or EWS_COOTENT_LENGTK_UNKNOWN «/ 

} fileField; 
# endif /• EW_C0NFIG_OPTI0N_FIELDTYPE_FILE */ 



• filelnfo - for support for local file operations {GET, HEAD , OPTIONS , 

• PUT, DELETE) . This structure is setup by the application when a URL 

• that corresponds to a local file is received. This structure 

• gives the server all it needs to know to handle the file operation. 
•/ 

M if defined { EW_C0NFXG_OPTION_FILE_G£T ) 
struct 
{ 

EwaFileName fileName; /• file name (opaque) •/ 

const chai *contentType ; h MIME type •/ 

const char -contentEncoding; h content encoding or NULL •/ 

const char *contentLanguage; /« content language or NULL */ 

const char *eTag; /* HTTP/1.1 cachability tag, or NULL */ 

const char * lastModif ied; /• modification time (RFC1123) or NULL */ 

const char * lastModif ieda 036 ; /« modification time (RFCI036) or NULL •/ 

const char *realm; /• auth reaim or NULL •/ 

int32 contentLength; /• length or EV?S_CONTENT_LENGTH_UNKNOWN */ 

EwsRequestMethod allow; /• allowed methods •/ 
/* HEAD & OPTION _alvays_ allowed by default •/ 

) filelnfo; 



char reservedl; 
} EwsFileParams, *EwsFileParamsP; 

4.1.8.2. File Upload 

Support for File Upload is enabled in the EmWeb server by defining the preprocessor 
symbol ew_config_option_fieldtype_file in ev_conf ig.h. 

To support file upload, Em Web supports the methods described in RFC 1867 (Form- 
based File Upload in HTML). At the time of this writing, only Netscape Navigator 
implements this RFC. For more information about RFC1867 and file upload 
support, contact Agranat Systems. 

RFC1 867 describes a new form input field of type-file. This form field results in an 
input field that allows a user to enter a filename. This filename is the name of a file 
that is accessible by the browser. On submission of this form, the browser reads the 
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file, and sends the file's contents to server as part of the post request. 
This file field takes the following form: 

<INPUT TYPE-FILE NAME»n«ame VALUE-value> 



Where name is the name of the form field and value is the default filename to display 
in the form when it is first served. When the EmWeb/Compiler encounters one of 
these form fields, the following form structure fields are generated: 

char *name; 
EwaFi leHandle na/ne^handle; 

The name field is used by the form serve function only. It allows the application to 
override the default file name given when the form is first displayed (note: some 
browsers do not support a default value - call Agranat Systems for more information). 
The name_handie field is used by the form submit function only. It provides the file 
handle for the submitted file (see the discussion of evaFiiePost below). The status 
for name_handie is set to (ew_form_returned i ew_form_dynamic) on successful file 
post, else ew_form_file_error. 

When EmWeb receives the submitted file, it allocates an EwsFiiePaiams structure 
and initializes the f iieFieid substructure. The fi leFieid substructure is setup using 
the optional file headers that are sent along with the file. The f iieFieid fields are: 



fileNarne 

Null terminated string containing the name of the file. This is usually 
supplied as the basename of the file (no path information). This field will be 
a null pointer if the browser does not supply a filename. 

contentType 

Null terminated string containing the value of the content -Type header, or 
a null pointer if the content -Type header is not present (assumed to be 
text/plain). 

contentEncoding 

Null terminated string containing the value of the content -Encoding header, 
or a null pointer if the content -Encoding header is not present. 

contentDisposition 

Null terminated string containing the value of the content -Disposition 
header, or a null pointer if the content -Disposition header is not present. 

contentLength 

set to the number of bytes in the file to be posted. If the content -Length 
header is not supplied by the browser, then this field will be set to 
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EWS_CONTENT_LEHCTH_UNKN0WN . 

As soon as EmWeb receives the submitted form containing an input typetile field 
with file content, prior to calling the application's submit function, a call will be made 
to the application interface ewaFilePost: 

EwaFileHandle ewaFilePost { 

EwsContext context, 

const EwsFilePaiams «params ) ; 

This function is provided by the application. The application defines the appropriate 
type for EwaFileHandle, and the vaJue for ewa_file_handle_null, which indicates a 
null EwaFileHandle. The paxatns parameter is initialized by EmWeb as described 
above, and released by EmWeb on return from ewaFilePost. 

ewaFilePost should open a file, and return a EwaFileHandle value that uniquely 
identifies that file. On error, ewaFilePost can return EWA_FiLE_)c-jn>LE_NULL, which 
will cause EmWeb to discard the contents of the submitted file without discarding the 
other submitted form fields. The application can also call ewssuspend to suspend the 
cun-ent context. In this case, ewaFilePost will be reinvoked (with 

ewsContextlsResuining (context) TRUE) once the application Calls ewsResume on 

the context. The request can be aborted and the connection closed if ewaFilePost 

invokes ewsNetHTTPAbor t. 

After ewaFilePost is called, EmWeb will start calling the file write routine: 



sintf ewaFileWiite( EwsContext context, 

EwaFileHandle handle, 
const uints -datap, 
uintf length ) ; 

handle is set to the value that was returned by the ewaFilePost call, datap is a 
pointer to the data to be written, and length is set to the number of bytes that can be 
written from datap. ewaFiiewxite returns the number of bytes written, or < o if an 
error occurred. If < o is returned, EmWeb will discard the rest of the incoming file 
without discarding the other submitted form fields. The application can suspend the 
current context by calling ewssuspend from within ewaFiiewxite and returning the 
number of bytes written prior to suspending (can be zero). The application can then 
resume the context by calling ewsResume. This will cause evaFiiewrite to be 

reinvoked With ewsConcextlsResuming ( concext ) «« TRUE and datap and length 

adjusted by the number returned by the suspended call to evsFiiewiite. The 
application can also call ewsNetHTTP Abort to abort the entire request, and close the 
connection. 

After the entire file has been received and written, the application's form submit 
function will be called. If the status field has been set to ew_form_?.eturhed, then the 
nan* handle contains the file handle for the file as returned by ewaFilePost. It is the 
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responsibility of the form submit function to dose the file at this point. 

Note well that once a file handle is returned by evaFiiePost, ft is the responsibility of 
the application to close that file handle during the form submit function. ErnWeb/ 
Server will ciosethe file handle if the request is aborted prior to calling the submit 

4.1.8.3. File Serve 

The EmWeb Server allows an application to provide a file externa] to an EmWeb 
archive for the response to a get request. This functionality is enabled by defining 
the preprocessor symbol ew_config_option_file_get in ev_config.h. 

To serve a file, an application must 'mark" a get request URL as representing a non- 
archive file. Once this is done, the EmWeb Server will "open" this file, read data from 
it and serve this data in response to the URL get. After all data is served, EmWeb 
Server will close the file. 

To "mark" a URL as a local file, the application calls the server interface 
evscontexcsetFiie during a URL get: 

EvsStatus evscontexcsetFiie ( EvsContext context, 

EvsFiieParamsP params ) ; 

evscontexcsetFiie can be called from: 

- evaUKLHook once the URL is determined to be a local file entity. 

- an application's form submit function prior to calling evscontextsendRepiy. In this 
case, the URL passed to evscontextsendRepiy represents the local file to be served. 

Note that both the evaURLHook and an application's form submit function can suspend 
the current context using evssuspend. This allows the application to do any 
.asynchronous tasks needed prior to calling evscontextsetFiie. 

The f ileinf o substructure of the paxam parameter must be set up by the application 
prior to calling evscontextsetFiie. This structure gives EmWeb Server all the 
information about the file it needs in order to serve the file as response content. The 
fields are described below: 

EwaRteName fileName 

This field is for use only by the application, EmWeb Server ignores this field. 
The type EvaFiieName must be specified by the application. 

contentType 

set to a null terminated string containing the value for the content -Type 
header that is to be sent with the file. 
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contentEncoding 

set to a null terminated string containing the value for the content- 
Encoding header that is sent with the file. If a null pointer, no content- 
Encoding header is sent. 

contentLanguage 

set to a null terminated string containing the value for the content - 
Language header that is sent with the file, if a null pointer, no content - 
Language header is sent. 



eTag 

reserved, must be set to null. 
iastModified 

the last modification date of the file in RFC1 123 format as a null terminated 
string. If null, it is assumed that the file should be served each time it is 
requested. 

IastModified1036 

the last modification date of the file in RFC1 036 format as a null terminated 
string. Some browsers cannot correctly recognize the RFC1123 format, so 
this field should be set in addition to the IastModified field. Call Agranat 
Systems for more information. 

realm 

the realm the request should be authenticated against for this file as a null 
terminated string, else null if no authorization required. Authorization is 
only checked when the file is served as a result of calling ewsContextSetFile 
from ewaURLHook - the realm used to protect the form submission is used 
implicitly when serving the file as a result of a ewsContextSendReply. 

contentLength 

Set to the number of- bytes in the fiie, else ews_content_length_unknown if 
the file's length is unknown. 

allow 

reserved, mUSt be Set tO evsRequestMethodGet. 

EmWeb/Server references the par am parameter for the duration of the file operation. 
As such, this parameter must be accessible throughout the life of the request - 
beyond the context of the evacontextsetFile call. It can be safely deallocated by the 
application during the ewaNetHTTPcieanup call. 

Once the URL has been •marked" by the evscontextsetriie call, EmWeb/Server 
will open the file using the evaFiieGet interface; 
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EwaFileHandle ewaFiieGet: ( EwsContexc concexc, 

const chai *uii, 
const EwsFileParamsP params ) ; 

The uii parameter is the URL that was "marked" as a file access, params is the 
EvsFiiePaxams structure that was passed to evscontextsetFiie. The application 
defines the appropriate type for EwaFileHandle, and the value for 

EWA_FILE_HANDLE_NULL, Which indicates a NULL EwaFileHandle. 

ewaFiieGet should open the file identified by params and mi, and return a 
EwaFileHandle that uniquely represents the file. On error, ewaFiiecec can return 
ewa_file_handle_null. This causes the connection to abort. If desired, the 
application can suspend the current context by calling ewssuspend from within 
ewaFiiecet. The context can be resumed at a later time by calling evsResume. 

ewaFiieGet Will be reinVOked (with ewsContextlsResuming ( context ) " TRUE). 

Once the file has been opened by ewaFiieGet, Em Web/Server will read the file by 

calling ewaFileRead.* 

sintf ewaFileRead( EwsContext context, 

EwaFileHandle handle, 
uint8 •datap-, 
uintf lengch ) ; 



This function should copy up to length bytes into the area of memory starting at 
datap. handle is set to the file handle returned by ewaFiieGet. On return, 
ewaFileRead should return the number of bytes written into da cap, which can be less 
than length. On error, < o should be returned (this causes the request to be aborted 
and the connection close). This function can suspend by calling ewssuspend and 
returning the number of bytes written into datap (can be zero). When the file 
described by handle has been completely read, this routine must return zero. 
Returning zero indicates that End-of-File has been reached (except when 
ewssuspend has been called prior to returning). 

©nee all file data has been read, EmWeb/Server will close the file by calling 
ewaFileClose: 

void ewaFileClose { EwaFileHandle handle, EvsStatus status ) ; 



ewaFileClose should close the file associated With handle (the EwsFileParams 

structure can be safely deallocated at this point), status will be set to ews_status_ok 
on successful completion of the file serve, otherwise it will be set to an error code. 
EmWeb/Server will call this function to close a file handle during an aborted request 
prior to calling ewaNetHTTPEnd. Note that this function does not support suspension. 
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4.2. Application Interface Examples 

This section is intended to illustrate the use of application interface functions under 
various scenarios. 

The following tables illustrates the application interfaces used in the simplest EmWeb/ 
Server configuration. 



Application->Server 
(Initialization) 


Server -> 
Application 


Description 


ewslni t 


evaAlloc 


Application initializes Em Web/Server. 
The server may allocate run-time 
memory resources. 


evsDocumentlnstallAi • 
chive 

evsAu thRegi s cex 


evaAlloc 


Application installs one or more docu- 
ment archives and registers zero or 
more authenticated users. The server 
allocates run-time memory resources 
for its internal databases. 



Application->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


evsNetHTTPStait 


evaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


evaAlloc 

evaNetBuf f eiFree 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Application->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


evsRun 


<EMWEB_STRING> 
<EMWEB_INCLUDE> 
evaFormServe * 
evaFormSubmi c_* 
evaCGIScart_« 
evaCGIData_« 


The server invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNetBuf feiAl - 
loc 

evaNetHTTPSend 
(STATUSJDK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 




evaFree 

ewaNetBuf f eiFiee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 


The next table illustrates a typical HTTP transaction during which the application 
instructs the EmWeb/Server to yield control of the CPU. 


Application->Server 
(Scheduling) 


Server -> 
Application 


Description 


evsNecHTTPS tart 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. Tne server allocates 
memory resources for the request. 


evsNejtKTTPReceive 


evaAlloc 

evaK e tBuf f e x Fx e e 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 


evsRun 


<emweb_string> 
<emweb~include> 
e wa Fo r ms e r ve_* 
ewa FormSubmi t_* 


The server invokes the application 
code attached to the requested docu- 
ment. 
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Application->Server 
(Scheduling) 


Server -> 
Application 


Description 






The application suspends the request. 
Processing on the request stops until 
resumed. 


evsResutne 


<EMWEB_STRING> 
<EMWEB_INCLUDE> 
ewaFormSeive^* 
evaFozmSubmi t_* 


The application resumes the request. 
The server re-invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




evaNe tBuffeiAl * 

IOC 

ewaNe tHTTPSend 
( STATU S — YIELD ) 


The server allocates and sends a 
response Duner. i ne application Trans- 
mits the data and requests that the 
server yield the CPU. 


ewsRun 


ewaNecEuf feiAl - 
loc 

ewaNe tHTTPSend 
(STATUS_YIELD) 


The application reschedules the 
server. The server sends the next 
buffer. 


evsRun 


ewaNe tBu f f e i Fi ee 

ewaFiee . . . 
ewaNe tKTTPEnd 


The application reschedules the 
server. The server releases resources 
and terminates processing of the 
request. 


The next table illustrates a typical scenario in which the application aborts processing of 
an incomplete HTTP request. 


Application->Server 
(Abort) 


Server -> 
Application 


Description 


evsNe tKTTPS tait 


evaAlloc 
• • • 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


ewsNecKTTPReceive 


evaAlloc 

evaNetBuf f erFree 
• • « 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Application->Server 
(Abort) 


Server •> 
Application 


Description 


evsNetHTTPAboi C 


evaFiee 

ewaNetBuf f eiFxee 
ewaNetHTTPEnd 


Application requests abort of HTTP 
transaction in progress. Server 
releases resources and terminates 
request. 


The next table illustrates the on-demand archive loading feature of EmWeb. 


Application->Server 
(Demand Loadino) 


Server -> 
Application 


Description 


ewsDocumentRegi scei 


ewaAlloc . . . 


Application registers a URL with 
EmWeb/Server that is not loaded. 


ewsNe tHTTPS tar c 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


ewsNetHTTPReceive 


ewaAlloc 

ewaNetBuf f erFiee 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 




ewaDocumencFaulc 


The server recognizes the requested 
URL to be a registered document and 
notities the application. 


evsD6cumentInstallAx - 
chives 




The application loads the archive con- 
taining the document. 


ewsRun 


<£MWEB_STRING> 

<EMWEB_INCLUDE> 

evaFortnSexve_* 

evaFormSubmi t_* 

evaCGIStart_« 

evaCGIData^ 


The server automatically continues 
processing the request once the docu- 
ment has been loaded. The server 
invokes the application code attached 
to the requested* document in order to 
construct a response on-the-fly. 




evaNe tBuf f exAl - 
loc 

evaNe tHTTPSend 
( STATU S_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 
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Application->Server 
(Demand Loading) 


Server -> 
Application 


Description 




evaFree 

evaNetBuf f eiFiee 
ewaNe tHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 



4.3. Porting Guidelines 

The Em Web/Server is distributed as a directory tree of ANSI C files. In order to assure 
the best possible upgrade path and support from Agranat Systems, most of these files 
should not be modified by the system integrator. 

To port EmWeb/Serverto a specif ic target environment foo, a target-specific conf ig. foo 
configuration directory must be created, conf ig. foo contains the target-specific 
configuration files ev^cypes.h, ev^config.h, and conf ig.mak. These files can be copied 
from the examples provided in the conf ig directory, and modified as appropriate for the 
target. 

To build the server library obj . foo/evs .a, use the following command: 

make CONFIG«foo server 

Note: The configure script may be used on Unix systems to 
automatically generate the configuration files for the local Unix 
development environment target. Typing "make" will build the 
ErnWeb/Compiler, the example archives, and the reference 
Unix port. 

4.3.1. Configuration Header Files 

The src/config/ev_types.hfile contains definitions for base C types used throughout 
the EmWeb/Server. Most of these are straightforward and generally do not require 
modification under 32-bit CPU architectures. The one definition which may require 
modification by the system integrator is the preprocessor symbol emweb_endian which 
is defined to either emwebjsndianjbig or emweb_endian_little, and reflects the byte- 
order of the target processor (Intel processors are generally little endian while 
Motorola processors are generally big endian). The symbol emweb_archive_endian 
indicates the byte-order of the archive generated by the ErnWeb/Compiler. By default, 
the compiler generates big-endian archives unless the — little command-line 
argument is present. Note that it is more efficient if the byte-order of the archive 
matches the byte-order of the target processor. 

The src/conf ig/ev_conf ig.h file definitions are expected to be modified extensively 
for porting Em Web/Server to a particular hardware platform as follows: 
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EW_CONF!G_HTTP_PROTOCOL 

Define the level of protocol conformance desired. Must be set to either 
H7TP_1_0 or HTTP_1_1. 

EW_CONFIG_OPTlON_DATE 

Define to enable generation of HTTP Dace: headers. This function requires 
that the application provide the evaDate function. This is required for 
protocol conformance, but some environments may simply not be able to 
determine the time-of-day. 

EW_CONFIG_OPTION_EXPlRE 

Define to enable generation of HTTP Expire; headers. The symbol 
ews_config_option_date must also be defined. If a dynamic document is 
requested (i.e. a document containing content defined by the application as 
it is being served), then an Expire: header is generated with the current 
time. Otherwise, no Expire: header is generated. The code size may be 
reduced by not defining this symbol. This is recommended for proper HTTP 
caching. 

EW_CONFIG_OPTION_LAST_MODIFIED 

Define to enable generation of HTTP Lasc -modified: headers. The symbol 
ews_config_option_date must also be defined. If a static document is 
requested, then the archive creation date is returned to the Web browser. 
Otherwise, the current time is returned to the Web browser. The code size 
may be reduced by not defining this symbol. This is recommended for 
proper HTTP caching. 

EW_CONFIGJ3PTlON_CONDITIONAL_GET 

Define to enable parsing of received if -Modified- since: headers to 
support conditional get functionality defined in the standard. This is 
recommended for proper HTTP caching. 

EW_CONFIG_OPnONJ3RAGMA_NOCACHE 

Define to enable generation of "pragma: no -cache" HTTP/1.0 headers for 
documents containing dynamic content. 

EW_CONFlG_OPnON_PERSISTENT 

Define to enable persistent connections. This is recommended, especially 
with HTTP/1.1, for optimum network performance. Persistent connections 
enable the browser to pipeline multiple HTTP requests over a single TCP/ 
IP connection which was not possible in the original HTTP/1 .0 specification. 

EW_CONFIGJDPTlON_CHUNKED_OUT 

HTTP/1.1 only. Define to enable the generation of chunked encoded data 
during transmission of documents containing dynamic elements. This 
makes maintaining a persistent connection possible under certain 
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circumstances and is strongly recommended. 

EW_CONF!G_OPnON_CHUNKEDJN 

HTTP/1.1 only. Required for protocol conformance. Define to enable 
parsing of chunked form data received from the browser. 

EW_CONF!G_OPT)ON_METHOD_OPTIONS 

Define to enable HTTP/1.1 options method. 

EW_CONFIG_OPTION_METHOD_TRACE 

Define to enable HTTP/1.1 trace method. 

EW_CONFIG_OPTION_CACHE_CONTROL 

Define to enable generation of HTTP/1.1 Cache-Control: headers. 
Recommended for optimum cache control. 

EW_CONFIG_OPTIONLSTRING 

Define if the application intends to use the <emweb_string> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_STRING_TYPED 

Define to enable typed emweb_strings (i.e. use of emwebjtype attribute). 

EW_CONFIG_OPTIONJNCLUDE 

Define if the application intends to use the <emwe3_include> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FORM ^ 

Define if the application intends to use the EmWeb form processing 
interfaces. Otherwise, code size may be reduced by not defining this 
symbol. 

EWJ?ONFIG_OPTIONJMAGEMAP 

Define if the application intends to use EmWeb imagemaps. Otherwise, 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10NLCGI 

Define if the application intends to use the raw CGI application interfaces. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTlONJJNK 

Define if the application intends to use the link attribute in ^access files. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CLONING 

Define j{ the application intends to use the evsDocumentcione application 
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interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFiG_OPTION_DEMAND_LOADING 

Define if the application intends to use the ewsDocumencRegistei/ 
ewaDocumentrauic application interface. Otherwise, code size may be 
reduced by not defining this symbol. 

EWj;ONFlGJDPTIONJ30CUMENTJDATA 

Define if the application intends to use the evsDocumentData application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_DOCUMENT_SET_REALM 

Define if the application intends to use the evsDocumencsecReaim application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_CLEANUP 

Define if the application desires to perform a graceful shutdown of the 
Em Web/Server by invoking evsshutdovn. In some application 
environments, graceful shutdown may not be necessary as a system restart 
may be accomplished by a re-boot of the processor. The code size may be 
reduced by not defining this symbol 

EW_CONFIG_OPT!ONLSCHED 

Define if the application intends to use EmWeb's internal scheduler making 
use of the evsRun application interface. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW_CONRG_OPT10N_SCHED_SUSP_RES 

Define if the application intends to use the evssuspend/ewsResume 
application interfaces. Otherwise, the code size may be reduced by not 
defining this symbol. 

.:• ~EW_CONFlG_OPTION_SCHED_FC 

Define if the application intends to use the ewsNetriovcontroi/ 
- r unnowconcroi application interfaces. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW CONFIG_OPT!ONJJRL_HOOK 

Define if the application intends to use the URL rewriting feature by 
providing the function ewaURLHook interface. Otherwise, the code size may 
be reduced by not defining this symbol. 

EW_CONFIG_OPnONLAUTH 

Define to enable support for authentication through the ewsAuthRegister 
application interface. Otherwise, the code size may be reduced by not 
defining this symbol. 



Copyright <D 1 997 Agranat Systems, Inc. Page 68 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 
EmWeb™ Functional Specification 



-97- 
Confidential 



PCT/US97/13817 



EmWeb/Server 



EW_CONFIG_OPT!ON_AUTH_BAS1C 

Define to enable support for the HTTP/1.0 basic cookie authentication 
method. The symbol ew_config_option_autk must also be defined. The 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_AUTHJWBAS!C 

Define to enable support for the "manual basic" authentication scheme. The 
code size may be reduced by not defining this symbol, 

EW_CONFIG_OPTION_AUTH_DIGEST 

Define to enable support for the HTTP/1.1 digest authentication method. 
The symbol ew_config_option_auth must also be defined. The code size 
may be reduced by not defining this symbol. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 
The following legal notice can be found in src/lib/ew_md5c.c: 

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All 
rights reserved. 

License to copy and use this software is granted provided that it 
is identified as the *'RSA Data Security, Inc. KD5 Message -Digest 
Algorithm" in all material mentioning or referencing this software 
or chis function. 

License is also granted to make and use derivative works provided 
that such works are identified as -derived from the RSA Data 
Security, Inc. MD5 Message -Digest Algorithm" in all material 
mentioning oi referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either 
the merchantability of this software or the suitability of this 
software for any particular purpose. It is provided "as is" 
without express or implied warranty of any kind. 

These notices must be retained in any copies of any part of this 
documentation and/or software. 

EWJDONFIG_OPT!ON_AUTH_MDlGEST 

Define to enable support for the "manual digest" authentication scheme. 
The code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_AUTHJD!GEST_M 

Define to enable support for the digestRequired parameter used in digest 
authentication. This protects against forged messages using proper 
authentication credentials. The symbol ew_config_option_auth_digest 
must also be defined. The code size may be reduced by not defining this 
symbol. 
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EW_CONFIG_OPTION_AUTH_VERIFY 

Define to enable support for secondary application-defined authentication. 
The code size may be reduced by not defining this symbol. 

EW_CONFiG_OPTIONJ3ELEASEJJNUSED 

Define to include extra code that attempts to release received network 
buffers as soon as possible if they do not contain information needed for the 
duration of an HTTP request. Otherwise, if HTTP headers are typically 
received in multiple network buffers, the ErnWeb/Server may hold on to 
these buffers longer than necessary. 

EW_CONFIG_OPT10N_FILE 

Define to include local file system support. The code size may be reduced 
by not defining this symbol 

EW_CONFIG_OPTION.FILE.GET 

Define to include access to local filesystem for GET method requests. This 
option requires ew_config_op>tion_file. The code size may be reduced by 
not defining this symbol. 

EW_CONFIG_OPT!ON_COMPRESS 

Define to include extra code required for decompression of compressed 
archives. 

EW_CONFIG_OPT10N_CONTEXT_DATE 

Define to enable the ewscontextDate application interface. The code size 
may be reduced by not defining this symbol. 

EWj:ONFlGJDPTION_CONTEXT_PRAGMA 

Define to enable the ewscontextPiagma application interface. The code size 
may be reduced by not defining this symbol. 

EW_C0NFIGJDPT10N_C0NTEXT_FR0M 

Define to enable the ewsconcextFrom application interface. The code size 
may be reduced by not defining this symbol. 

EW.CONFlG_OPT!ON_CONTEXTJF_MODIFIED_SINCE 

Define to enable the evscontextifModifiedsince application interface. 
Furthermore, ErnWeb/Server honors the HTTP If -modified- since: 
header for static documents by comparing to the archive creation date. 
(Note that dynamic documents are always served). The code size may be 
reduced by not defining this symbol. 

EW_CONFIG_OPnON_CONTEXT_REFERER 

Define to enable the ewsconcextReferer application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 
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EW_CONFIG_OPTION_CONTEXT_USER_AGENT 

Define to enable the evscontextuseiAgent application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CONTEXT_HOST 

Define to enable the ewsContextHost application inter/ace. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTJON_SEND_REPLY 

Define to enable the ewsContextSendReply application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFlG_OPT10N_CG!_SERVER_SOFTWARE 

Define to enable the evscGir.erver software application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

Define to enable the evsccicatevayinteiface application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTJONLCGI_SERVER_PROTOCOL 

Define to enable the evscciseiveiPiotocoi application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_REQUEST_METHOD 

Define to enable the evsccxReguestMethod application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_PATHJNFO 

Define to enable the evsccipathinfo application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTJON_CGLSCRIPT_NAME 

Define to enable the evsccisciiptName application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_.CGI_QUERY_.STRING 

Define to enable the evsccicmerystring application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPHON_CGI_CONTENT_TYPE 

Define to enable the evscci contentType application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFlG_OPHON_CGLCONTENT_LENGTH 

Define to enable the evscciconcentLengch application interface. Otherwise, 
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the code size may be reduced by not defining this symbol. 

EW^CONFIG.OPTION.CGLCONTENT.ENCODING 

Define to enable the evscciconcencEncoding application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTlON_FIELDTYPE_RAD!0 

Define to enable support for EmWeb HTML form radio buttons. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FlELDTYPE_SELECT_SINGLE 

Define to enable support for EmWeb HTML form single option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTlON_FIELDTYPE_SELECT_MULTIPLE 

Define to enable support for EmWeb HTML form multiple option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_F!ELDTYPE_CHECKBOX 

Define to enable support for EmWeb HTML form checkbox fields. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FIELDTYPE_TEXT 

Define to enable support for EmWeb HTML form text fields. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_FIELDTYPEJMAGE 

Define to enable support for EmWeb HTML form image inputs. Otherwise, 
the code size may be reduced by not defining this symbol. 

1ew_config_option - fieldtypejdecimal_uint 

Define to enable support for EmWeb HTML form text fields for unsigned 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFlG_OPTION_FIELDTYPEJDECIMALJNT 

Define to enable support for EmWeb HTML form text fields for signed 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

E W_C O N Fl G_0PT1 0 N_FI ELDTYP E_H EXJ NT 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 
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EW_CONFIG_OPT10N_FIELDTYPE_HEX_STRING 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
octet strings. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONF1G_OPT10N_FIELDTYPE_DOTTEDIP 

Define to enable support for EmWeb HTML form text fields for dotted IP 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPT10N_F1ELDTYPE_DECNET_IV 

Define to enable support for EmWeb HTML form text fields for DECnet IV 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_F!ELDTYPEJEEE_MAC 

Define to enable support for. Em Web HTML form text fields for IEEE MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

E W_C O N FI G_OPTI 0 N_FI E LDTYP E_FD D !_M AC 

Define to enable support for EmWeb HTML form text fields for FDD! MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_F1ELDTYPE_STD_MAC 

Define to enable support for EmWeb HTML form text fields for big or little 
endian standard MAC addresses. Otherwise, the code size maybe reduced 
by not defining this symbol. 

EWJ2ONFIG_OPTl0N_FlELDTYPE_OID 

Define to enable support for EmWeb HTML form text fields for SNMP object 
identifiers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPT10N_FIELDTYPE_FILE 

Define to enable support for RFC 1 867 file upload from browser. This option 
requires ew_configj3ption_file. The code size may be reduced by not 
defining this" symbol. 

EW_CONF)G_OPTION_BROKEN_IMS_EXTRA_DATA 

Define to handle non-conformant browsers that place. extra data at the end 
of If-Modified-Since: headers. Otherwise, the code size may be reduced by 
not defining this symbol. 
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EW_CONFIG_OPTION_BROKEN_NEED_OPAQUE 

Define to handle non-conformant browsers that require optional opaque 
field in digest authentication headers. Otherwise, the code size may be 
reduced by not defining this symbol. 



EwaNetBuffer 

Define the C type used to represent a buffer descriptor. 

E W A_N ETJ3 UFFE R_N ULL 

Define the value of a null buffer descriptor used to terminate a chain of 
buffers or indicate no buffers available. 

,>EwaNetHandle 

Define the C type used for the application-defined network handle passed 
to EmWeb/Server in evsNe tHrrpstai c and available from the request 

context by ewsContexcNetHandle. 

EwaDocumentHandle 

Define the C type used for the application-defined document handle passed 

tO EmWeb/Server in ewsDocumentClone Or ewsDocumentRegiscex and 

available from the request context by evscontextDocumentHandie. 

EWA_DOCUMENT_HANDLE_NULL 

Define the value for a null document handle stored in the context for 
documents that have not been cloned or registered. 

EwaAuthHandle 

Define the C type used for the application-defined authorization handle 
passed to EmWeb/Server in ewsAuchRegiscei and available from the 

request context by evsContexiAuthHandle . 

^EWS_AUTH_HANDLE_NULL 

Define the value for a null authorization handle stored in the context for 
requests that have not been authenticated. 

EwaAuthNonce 

Define the C structure containing parameters used in generating nonce 
challenges. 

EwaCGlHandle 

Define the C type used for the application-defined CGI handle passed to 
EmWeb/Server from evaCGistait_* and returned to the application in 

Subsequent evaCGIData_*. 

EWA_CGLHANDLE__NULL 

Define the value for a NULL CGI handle stored in the context for CGI 



Copyright Q 1997Agranat Systems, Inc. Page 74 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



,:,n WO 98/06033 " • PCT/US97/138I7 

- 10"* - 

EmWeb™ Functional Specification Confidential EmWeb/Server 

requests. 

EWA TASK_LOCK0 

"This application-defined macro is invoked by EmWeb/Server to enter a 
critical region. If the application is preemptive and multiple threads may 
access EmWeb application interface functions simultaneously, then this 
macro should be defined in such a way as to disable preemption. 



EWA TASKJJNLOCK0 

"This application-defined macro is invoked by EmWeb/Server to leave a 

critical region entered by ewa_task_lock ( ) . 

EMWEB ERRORO 

This application-defined macro is invoked by EmWeb/Server to report 
serious error conditions, usually a result of improper system integration. 

EM WE B_W AR N 0 

This application-defined macro is invoked by EmWeb/Server to report an 
en-or condition for which recovery is possible. 

EMWEB_TRACE0 

This application-defined macro is invoked by EmWeb/Server to trace 

execution for debugging. 

EWA LOG_HOOK 

Define to enable the ewaLogHooko application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EMWEB_SANITY 

Define to enable extra code for checking the consistent use of the API and 
internal data structures. This is strongly recommended during initial porting 
and debug. However, the code size may be reduced by not defining this 
symbol. 

EMWEB_HAVE_MEMCPY 

Define to use application-provided run-time memcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEBJHAVE.MEMSET 

Define to use application-provided run-time memsec library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_SPRINTF 

Define to use application-provided run-time spxintf library function. 
Otherwise, extra server code is included to handle conversions from 
integers to strings (%d, %x). 
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EMWEB__HAVE_STRCPY 

Define to use application-provided run-time scrcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRLEN 

Define to use application-provided run-time scxien library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRCMP 

Define to use application-provided run-time sticmp library function. 
Otherwise, extra server code is included to implement this functionality. 

EwaFileHandle 

Define the C type used for the application-defined file handle used in the 
local filesystem API. 

EWA_FILE_HANDLE_NULL 

~Define the value for a null file handle as used by the local filesystem API. 

EwaFileName 

Define the C structure used to represent an application-defined filename 
parameter as used by the local filesystem API. 

The following macros may be defined to override EmWeb/Server defaults as follows; 

EWS FILE_HASH_SIZE 

Default: 256. Information about each unique URL loaded from an archive, 
registered, or cloned, is maintained in an open hash table for fast lookup. 
This macro may be defined to set the number of entries in the hash table, 
where each entry contains a pointer value. Smaller values will typically 
decrease memory usage while increasing search times. 

EWS_REALM_HASH_SIZE 

~ Default: 4. Information about each unique realm defined in loaded archives 
or by the ewsDocumentsecReaimO function is maintained in an open hash 
table for fast lookup. This macro may be defined to set the number of entries 
in the hash table, where each entry contains a pointer vaJue. Smaller values 
will typically decrease memory usage while increasing search times. 

EWS_NONCE QUEUE.StZE 

Default: 4. If digest authentication is used, outstanding nonce values are 
maintained in a circular queue. This macro may be defined to set the 
maximum number of outstanding nonce values, where each value will 
contain approximately 48 bytes of state information plus the size of the 
application-defined EvaAuchwonce structure. Larger values are 
recommended if one-time nonces are to be used and/or many simultaneous 
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authenticated requests from different clients are likely. 

EWS_HTTP_STATUS_204, EWS_HTTP_STRING_204 

Default: "No Content", n \r\n". These macros may be used to override the 
status line and message body issued for a no content HTTP response. (This 
status is generated in response to a form submission application function 
returning NULL, or to an undefined region of an imagemap if no default URL 
was specified). 

EWS_HTTP_STATUS_304, EWS_HTTP_STRING_304 

Default: "Not Modified", "\r\n". These macros may be used to override the 
status line and message body issued for a not modified HTTP response. 
(This status is generated in response to a conditional GET request if the 
requested document has not changed since the "If-Modified-Since:" value). 

EWSJHTTP STATUS_400, EWS_HTTP_STRING_400 

Default: "Bad Request" , "\r\n400 Bad Request\r\n'\ These macros may be 
used to override the status line and message body issued for a bad request 
HTTP response. (This status is generated in response to an HTTP request 
that could not be parsed). • 

EWS HTTP_STATUS_401, EWS_HTTP_STRING_401 

'"Default: "Unauthorized", n \r\n401 Unauthorized\r\n". These macros may be 
used to override the status line and message body issued for an 
unauthorized HTTP response. (This status is generated in response to an 
HTTP request that did not contain proper credentials to access the server). 

EWS_HTTP_STATUS_404, EWS_HTTP_STR!NG_404 

Default: "Not Found", "\r\r>404 Not Found\r\n". These macros may be used 
to override the status line and message body issued for a not found HTTP 
response. (This status is generated in response to an HTTP requests for an 
unknown or hidden URL). 

EWS HTTP_STATUS_411, EWS_HTTP_STRING_411 

""Default: "Length Required", n \r\n411 Length Required\r\n". These macros 
may be used to override the status line and message body issued for an 
internal error HTTP response. (This status is generated in response to an 
HTTP/1.1 request containing chunk encoded form data with 
ew_config_option_chunked_in disabled). 

EWS HTTP_STATUS_500, EWS_HTTP_STRlNG_500 

"Default: "IntemaT Error, "\r\n500 Internal ErrorVAn". These macros may be 
used to override the status line and message body issued for an internal 

. error HTTP response. (This status is generated in response to an HTTP 
request resulting in a detectable internal error. This should not ever occur.) 
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EWS J-1TTP_STATUS_501 , EWS_HTTP_STRING_501 

Default: "Not Implemented", M \r\n501 Not lmplemented\r\rV\ These macros 
may be used to override the status line and message body issued for a not 
implemented HTTP response. (This status is generated in response to an 
HTTP request containing a method not supported by the URL). 

EWSJ-nTP_STATUS_503, EWS_HTTP_STRING_503 

Default: "Service Unavailable", "\r\n503 Service Unavailable\r\n w . These 
macros may be used to override the status line and message body issued 
for a sen/ice unavailable HTTP response. (This status is generated in 
response to an HTTP request for a registered and unloaded document 
when the, application-specific ewaDocumentFauItO function aborts the 
request rather than loading the archive containing the URL). 

4.3.2. Application-Provided Functions 

The following functions must be provided by the application: 

- System functions 

. ewaAlloc 
. ewaFree 

- Network functions 

. ewaNetBufferAlloc 
. ewaNetBufferFree 
. ewaNetBufferNextGet 
. ewaNetBufferNextSet 
. ewaNetBufferLengthGet 
. ewaNetBufferLengthSet 
. ewaNetBufferDataGet 
. ^ewaNetBuff erDataSet 
TewaNetHTTPSend 
r-ewaNetHTTPEnd 
. ewaNetHTTPCIeanup 
. ewaNetLocalHostName 

The following functions may be provided by the application if certain optional EmWeb/ 
Server features are desired. 

- System functions 

. ewaDate 
. ewaLogHook 
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• Document functions 

. ewaDocumentFault 
. ewaURLHook 

• Authentication functions 

. ewaAuthRealmQualifier 

- Digest Authentication functions 

. ewaAuthNonceCreate 
. ewaAuthNonceCheck 

- Manual Authentication functions 

. ewaAuthCheckBasic 
. ewaAuthCheckDigest 
. ewaAuthVerifySecurity 



4.4. Memory Requirements 

The following table illustrates the approximate incremental executable image size of the 
EmWeb/Server for various configuration options enabled compiled using GNU gcc- 
2.7.0 with -02 for the Intel 486, the Intel i960, and the Motorola MC68000 architectures. 
These values are subject to change without notice. 



Incremental Option 


i486 


i960 


MC68000 


Base EmWeb/Server functionality 


7,380 


7,496 


6,238 


<EMWEB_STRING> 


180 


216 


184 


Typed <EMWEB_STRING>s 


464 


464 


454 


<EMWEBJNCLUDE> 
(requires some additional code 
from <EMWEB_STRING>). 


384 


400 


312 


Base EmWeb HTML form support 


3,124 


3,168 
j 


2,548 


Imagemap support 


288 


320 


272 


Base raw CGI support 


640 


656 


578 


URL Link support 


16 


32 


28 


Document cloning 


400 


400 


314 


Document on-demand loading 


492 


520 


440 
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increrneniai upuun 


l*+OD 




IVl UDO UUV 


Document data access 


64 


72 


74 


Graceful server shutdown 


272 


264 


220 


Request scheduling (yield CPU) 


656 


624 


444 


Proxy (ewsSuspend/ewsResume) 
(requires request scheduling) 


320 


296 


242 


Network flow control 
(requires request scheduling) 


368 


288 


264 


♦-URL rewriting (ewaunLnooKj 


OU4 


*L\JD 




-base iiiesysxern suppon 


1 /O 




1 /U 


GET/HEAD from local filesystem 
(rfequires us.se uiesysieni sup./ 


1,876 


1,480 


1,326 


Base authentication support 


1,168 


1,032 


934 


Basic authentication 


952 


1,056 


824 


Digest authentication 


5,547 


6,732 


5,366 


Client message digest verification 
(requires digest authentication) 


1,335 


1,016 


742 


Manual basic authentication 
(requires basic authentication) 


608 


472 


482 


Manual basic decode 


336 


352 


198 


Mimical Hinoct 5» i rf hontif*Ption 

jvidnuai uigtJoi guuici mucuiui i 
{requires digest authentication) 


vO*t 


368 

WWW 


366 

WWW 


HVtanuaj auinenLicciiiUi i vciiuwiuuu 


144 


1 Ad 


128 

1 £— W 


-Run-time document realm override 


0 


0 


0 


Base HTTP/1.1 support 


1,284 


1,160 


972 


Persistent connections 


883 


616 


614 


Generate chunked encoding 
(requires HTTP/1.1) 


828 


784 


632 


Parse chunked encoding 
(requires HTTP/1. 1) 


855 


552 


468 


OPTIONS method 


250 


240 


192 
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Incremental Option 


i486 


i960 


MC68000 


TRAPF method 


288 


288 


204 


r^pnorato f^ohp-f^nntrn! hp^dprs 

Owl ICI olC wOUiC L/U1UIU1 liCflUwId 


122 


128 


96 


/npnprptp Hpfp hpaders fewaDate^ 


41 


64 


32 


Conorato P-vnirp hppHpr<i 

(ewaDate) 


76 


176 


60 


Generate Last-Modified headers 


82 


112 


76 


Conditional get support 


239 


280 


248 


Generate Pragma headers 


35 


48 


34 


Early release of network buffers 


224 


240 


208 


Compression 


525 


584 


462 


Parse Date headers 


64 


56 


72 


Parse Pragma headers 


75 


64 


82 


Parse From headers 


73 


72 


82 


Parse If-Modified-Since headers 


64 


64 


72 


Parse Referer headers 


76 


64 


86 


Parse User-Agent headers 


79 


104 


90 


Parse Host headers 


169 


128 


124 


ewsContextSendReply 


626 


632 


494 


ewsCGIServerSoftware 


31 


40 


30 


ewsCGIGatewaylnterface 


24 


32 


22 


e ws C G 1 S e rve rProtoco 1 


64 


56 


68 


ewsCGIRequestMethod 


64 


64 


68 


ewsCGIPathlnfo 


16 


16 


16 


ewsCGIScriptName 


16 


16 


16 


ewsCGIQueryString 


64 


64 


68 


ewsCGIContentType 


80 


64 


72 


ewsCGlContentLength 


16 


16 


16 


ewsCGIContentEncoding 


64 


64 


72 
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incremental Option 


i486 


i960 


MC68000 


Form radio buttons 


328 


304 


254 


Form single option select boxes 


57 


64 


62 


Form multiple option select boxes 


128 


144 


124 


Form checkboxes 


96 


96 


92 


Form text fields 


307 


352 


256 


Form image input fields 


93 


104 


86 


' "Form text fields - unsigned integer 


0 


u 


o 


"Form text fields - signed integer 
(requires some code from 
unsigned integer) 


98 


128 


90 


Form text fields - hexadecimal int . 
(requires some code from 
unsigned integer) 


164 


184 


166 


Form text fields - hex string 
(requires some code from 
unsigned integer) 


706 


704 


550 


Form text fields - dotted IP 
(requires some code from 
unsigned integer) 


354 


A1 f\ 


310 


Form text fields - DECNet IV 
(requires some code from 
unsigned integer) 


272 




280 

£p W w 


Form text fields - IEEE MAC 


144 


I OU 


136 


Form text fields - FDDI MAC 
(requires some code from IEEE 


A O 




44 


Form text fields - Standard MAC 
(requires some code from /ttn 
MAC) 


160 


192 


168 


Form text fields - SNMP Object ID 


400 


400 


340 


Form file fileds - file upload 
(requires base filesystem support) 


4,372 


4,232 


3,394 


1 Broken If-Modified-Since Extra 


84 


126 


! 124 
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Incremental Option 


i486 


i960 


j 

I MC68000 


Broken digest need opaque 


16 


16 


16 


Internal sprintf library 


656 


736 


582 


Internal strcpy library 


112 


336 


46 


Internal strcmp library 


128 


184 


52 


Internal strlen library 


.160 


384 


162 


Internal memcpy library 


160 


80 


-8 


Internal memset library 


16 


16 


-2 


Extra sanity checking code 


1,248 


1 ,080 


1,008 


Error reporting 


2,498 


2,984 


2,358 


Warning reporting 


2,527 


2,888 


2,350 


Debug tracing 


1,666 


2.392 


1,764 


Logging hook 


704 


1,056 


778 


FULL CONFIGURATION 


52,677 


55.34S 


44,740 



Note that some of the configurable options listed in the table above depend on pieces 
of code included from previous options as indicated. The table shows the incremental 
requirements as each option is added from top to bottom. Therefore, the executable 
image size for an arbitrary set of options may be different than the sum of the values 
shown above. 

Additional archive memory requirements include 

- Compressed file contents and embedded application object code (controlled by 
application) 

• 120 bytes per archive 

• 36 bytes per document in archive (plus null-terminated URL string) 

• 12 bytes per <emweb_strikg>, <emweb_include>, CGI script, or form field 

- null terminated strings for authorization realms, mime types, creation date, etc. 

• compression dictionary (if compression used). 
Additional run-time memory requirements include: 
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- Network buffers (controlled by application). Em Web/Server typically holds on to 
received buffers containing HTTP headers of interest for the duration of a request, 
and typically allocates only one or two buffers before sending them to the application 
for transmission, 

- 1,028 • 1,096 bytes total global ErnWeb state (using defaults for hash table sizes 
which may be overridden by application) 

• 176 - 636 bytes per HTTP request (plus 48-52 bytes for first served document, plus 
48 bytes for decompression context if compressed) 

- 48-52 bytes per nested <emweb_include> document (plus 48 bytes for de- 
compression context if compressed) 

- 40-64 bytes per URL in archive (including clones and registered documents) 

- 20-44 bytes per authorization realm plus null-terminated realm name string 

- 20-28 bytes per authorization entry plus Base64 or MD5 encoding of user/password 
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5. Conformance 

The EmWeb/Server implements the HTTP/1.1 and HTTP/1.0 protocols, and MD5 Digest 
Authentication. 

The EmWeb/Server raw CGI capabilities support the functionality of CGI/1.1, but the 
interfaces are non-standard as they are optimized for the EmWeb/Server environment. In 
addition, some CGI/1.1 interfaces depend upon the specific integration of EmWeb/Server 
into the application environment. 

The Em Web/Compiler supports HTML^2.0 Forms with RFC 1867 file upload extensions. 
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6. Release History 



Release 1.0 (12/23/96) 


General Availability 


Release 1.1 (02/16/97) 


Added network flow-control interfaces 


Release 1.2 (02/26/97) 


Ported to VxWorks 


Release 1.3 (03/07/97) 


Ported to pSOS 


Release 2.0 (04/14/97) 


Added HTTP/1.1 support 
Added support for typed EMWEB_STRINGs 
Added E M WE B_STATI C cache-control override 
Added support for remote authentication databases 


Release 2.1 (06/20/97) 


Added native filesystem support 
Added RFC 1867 (file upload from browser) support 
Added support for EMWEB_TYPE=OBJECT_ID 
Added support for SNMP Research <mibobj> tags 
Added ewaNetHTTPCIeanupO interfaces 
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A. EmWeb Application Interface Header Files 

This appendix is intended for reference only and is not part of this specification. The C 
header files listed here are part of the standard EmWeb source distribution and may be 
updated from time to time. 



A-1. Configuration 

These sample configuration header files are provided in the EmWeb source distribution. It 
is expected that these files will be modified by the system integrator in order to port the 
EmWeb/Server to the target environment No other files in the EmWeb distribution should 
be modified in any way. 

A-1.1. src/config/ew_types.h 

This files contains definitions for base C types used throughout the EmWeb product. In 
most environments, this file will not need to be modified except possibly for the definition 
of emweb_endian and emw2b_archive_sndian. However, for some compilers, it may be 
necessary for the system integrator to modify additional definitions here. 

ew_types.h, v 1.20 1997/03/31 19:14:25 lawience Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All^Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales©agranat . com, suppor t©agranat . com 
http : //www . agranat . com/ 
EmWeb common types 

>/ 

#ifndef _EW_TYPES_H 
ttdefine _EWJTYPES~H 

/• 
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* C - TYPES 

* The following basic C- types aie defined (see evjronfig.h) 
*/ 

tfifndef INT8 

# define INT8 signed char 
#endif 

tfifndef UINT8 

# define UINT6 unsigned chai 
#endif 

ftifndef INT16 

# define INT16 shore int 
flendif 

tfifndef INT32 

define INT32 long int 
#endif 

tfifndef P_INT /* an integer the same size as a pointer */ 

# define P_INT int 
*endif 

typedef INT8 
typedef INT16 
typedef INT3 2 
typedef UINT8 
typedef unsigned INT16 
typedef unsigned IHT32 

/* 

* Volatiles for memory 
•/ 

typedef volatile inte 
typedef volatile intl6 
typedef volatile int32 
typedef volatile uints 
typedef volatile uintl6 
typedef volatile uint32 

/• 

* FAST TYPES 

* The following types offer the most 
*• These are never assumed to be more 
•/ 

typedef int sintf; 
typedef unsigned uintf; 

/* 

* BOOLEAN 

* The boolean type is used primarily as a function return type. Note that 

* a default representation of TRUE and FALSE are defined. However, care 

* should be taken to avoid comparing against these values. For most compilers, 

* TRUE can be any non-zero integer while FALSE is defined as zero. 



inte; /* signed eight bit integer */ 

intl6; /■ signed sixteen bit integer */ 

int32; /• signed thirty -two bit integer •/ 

uint8; /• unsigned eight bit integer •/ 

uintl6; /* unsigned sixteen bit integer */ 

uint32; /• unsigned thirty -two bit integer */ 



shared with devices 

vint8; /• volatile signed eight bits */ 

vintl6; /• volatile signed sixteen bits •/ 

vint32; /* volatile signed thirty- two bits •/ 

vuint8; /* volatile signed eight bits */ 

vuintl6; /* volatile unsigned sixteen bits •/ 

vuint32; /• volatile unsigned thirty-two bits */ 



efficient compilation for optimized speed 
than 16 bits. 

/* signed integer */ 
/* unsigned integer */ 
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#define TRUE • (0 * = 0) 

fldefine FALSE ( ! TRUE) 

cypedef uintf boolean; /* true or false (non-zero or zero) •/ 

/• 

* POINTER INTEGER 

* The pointer integer is an unsigned integer large enough to accommodate a 

* machine pointer. This is used primarily for generic pointer arithmetic. 
*/ 

typedef P__INT pint; /* unsigned integer for pointer •/ 

/* 

* NULL POINTER 
*/ 

#ifndef NULL 

^define NULL (0) 
#endif /• NULL ♦/ 

/* 

* ENDIAN (don't change these) 
*/ 

^define EMWE B__END I AN__B I G 1234 
^define EMWEB_ENDIAN_LITTLE 4321 

typedef enum Endian_e 
{ 

ewBigEndian « EMWEB_ENDIAN_BIG , 
evLi ttleEndian « EKWEB^ENDIAN__LITTLE 
) Endian; 

#if o 
/* 

* EMWEB_ENDIAN • Define as endian -ness of target architecture 
•/ 

#ifndef EMWEB_ENDIAN 

# ifdef HAVE_CONFIG_H 
ft include -config.h" 

# ifdef WORDSJ3IGENDIAN 

ft define EMWEB_ENDIAN EMWEB_ENDIAN_BIG 

ft else 

ft define EMWEB_£NDIAN EKWEB_ENDIAN_LITTLE 

# endif 
ft else 

ft pragma error "Define EMWEB_ENDIAN for target" 

ft endif 

#eise 

ft pragma error "Define EMWEB_END IAN for target" 
ftendif /* HAVE_CONFIG_H */ 
ftendif /* !TBD: •/ 

/• 

* EMWEB ARCHIVE ENDIAN 
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* Define endian fox target archive as generated by EmWeb/Cotr.pi ler 
*/ 

Odef ine EKWEB_ARCHIVE_ENDIAN EMWEB_ENT>IAN_BIC 
/« 

« COMPILER COMPATIBILITY 

* BEGIN_DECLS precedes external definitions, END_DECLS follows external 

* definitions. These could be defined as 'extern "C" {' and respectively 
s * for GNU O* compilers, for example. 

*/ 

flifdef cplusplus 

^define BEGIN_DECLS extern "C" t 

* define END_DECLS } 

#else /* cplusplus */ 

#def ine BEGIN_DECLS 

#define END_DECLS 

flendif /• cplusplus •/ 

/* 

* PHOTOTYPES 
*/ 

BEGIN_DECLS 

END DECLS 



*endif /* _EW_TYPES_H */ 



/ 



A-1.2. src/config/ew_config.h 

This file must be modified by the system integrator to taylor EmWeb/Server to the target 
environment. 

ev_config.h,v 1. 77. 2. 3 1997/06/15 19:22:31 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agxanat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) B93-7868 

salesGagxana t . com , suppox t©agr ana t . com 
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* 

* EmWeb common configuration 
* 

•/ 

ttifndef _EW_C0NFIG_H 
#def ine _EW_CONFIG_H 

/* 

* Types for sized integers: INT8 INT16 INT32 F_INT 

* These are guesses as to the correct types to produce the 

* required sizes for your system. 

* The configure script will attempt to sec these correctly 

* for the compiler platform; you should sec when you copy this 

* file for each target. 
*/ 

Sifndef INT8 

# define INT8 signed char 
#endif 

ttifndef INT16 

U define INT16 short int 
#endif 

tfifndef INT32 

# define INT32 int 
#endif 

tfifndef P_INT / w an integer the same size as a pointer •/ 

a define P_INT int 

#endif 

8 include "ew_ types .h M 

/• "~ 

* INCLUDES 

* Any system includes needed by application environment go here 

*/ T 

extern void application_tick () ; 
tfinclude <s tdio . h> 
^include <stdlib.h> 
^include <sys/ types . h> 
^include <netinet/in.h> 
^include <signal.h> 

/• 

* HTTP PROTOCOL VERSION 
*/ 

# define HTTP_1_0 1000 /* DO NOT MODIFY •/ 
ft define HTTF~1~1 1001 /* DO NOT MODIFY •/ 

* Select desired conformance level 
V 
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^define EW_C0NFIG_HTTP_PR0TOCOL HTTP_1_1 



PROTOCOL OPTIONS (>« HTTP/l.O) 

(R) Required, but some embedded syscems don't have time*of-day 
(O) Optional, but strongly recommended 



#define EW_CONFIG_OPTIONJDAT£ /• (R) 

#define EW_CONFIG_OPTIONJE:XPIRE /* (O) 

^define EW_CONFIG_OPTION_LAST_MODIFIED /• (O) 

fldefine EW_CONFIG_OPTION_CONDITIONAL_GET/- (O) Parse If -Modif ied-Since : •/ 

^define EW_CONFIG_OPTION_PRAGMA_NO CACHE /* (O) Generate Pragma: no-cache •/ 



Generate Date: */ 
Generate Expire; */ 
Generate Last -modif ied : •/ 



/* 

* PROTOCOL OPTIONS (>- HTTP/1.1) 

* (O) Optional, but strongly recommended 
(*} May be used with HTTP/l.O 



^define £W_CONFIG_OPTION_P£R SI STENT 
# d ef i n e EW~C0NFI G_OPTI ON_CHUNKTD_OUT • 

^define ew_config2option_chunked_in 



(O* ) persistent connections */ 
(O) respond with chunked encoding */ 
(O) parse chunked encoding •/ 
(O*) support OPTIONS method * / 
tfdefine EW_CONFIG_OPTION_METHOD_TRACE /* CO* ) support TRACE method •/ 
Ifundef EW_CONFIG_OPTION_METHOD__PUT /* (*) support PUT operations •/ 

#undef EW_CONFIG_OPTION_METHOD_DELETE /* (*) support DELETE operations */ 
adefine EW_C0NFIG_OPTION_CACHE_CONTROL /* (0») Generate Cache - Control : •/ 



^define EW_C0NFIG OPTION_METHOD_OPTIONS /« 



CONFIGURATION OPTIONS 



* The EmWeb/Server may 

* between functionality 

* below may be selected 
•/ 

fldefine EW_C0NFIG_OPTION 
fcdefine EvTcONFIGJDPTION 
#define EW~CONFIG~OPTION 
fcdefine EW~CONFIG_OPTION 
fldefine EW_CONFIG_OPTION 
#define EW~CONFIG~OPTION 
^define EvTcONFIG_OPTION 
tfdefine EW_CONFIG_OPTION 
tfdefine EW_C0NFIG_OPTION 
#define EW_CONFIG_OPTION 
^define EW_CONFIG^OPTION 
fldefine EW_C0NFIG_OPTION 
fldefine EW~C0NFIG_OPTION 
# define EW~C0NFIG_OPTION 
#define EW_C0NFIG_OPTION 
ttdefine EW_C0NFIG_OPTION 
^define EW_CONFIG_OPTION 
#define EW_CONFIG_OPTCON 
ttdefine EW_C0NFIG_OPTION 
* define EW~C0NFIG OPTION 



be customized by the application developer to balance 
v.s. memory and CPU requirements. Each of the options 
(^define) or unselected (Sundef ) . 



STRING /' 
STRINGJTYPED /• 

[INCLUDE /+ 

"form /* 

[IMAGEMAP /+ 

[CGI /« 

"link /• 

CLONING /• 



emweb_string support •/ 
typed emweb_string support 
emweb_include support •/ 
form support •/ 
support for imagemaps */ 
law CGI support */ 
link node support */ 
URL cloning support */ 



_DEMAND_LOADING /* demand document loading support */ 
M30CUKENTJDATA /* direct archive data access support 1 
f_DO CUMENT_S ET__RE ALM /* run -time realm assignment sup. « 



>/ 



CLEANUP 
SCHED 



/* graceful cleanup support */ 
/* request scheduling support */ 



f__SCHED_SUSP_R£S /* suspend/resume request support */ 

flow control support •/ 
request URL rewriting hook •/ 
authorization support */ 
basic authorization support */ 
digest authorization support */ 
4 verify client message digest */ 



SCHED_FC h 

URL_HOOK h 

AUTH /• 

AUTHJ3ASIC /• 

AUTHJDIGEST /* 

"auth~digest M /« 
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#define EWj:oNFIGj>PTION_AUTH_MBASIC /* "manual" basic authentication •/ 
#define EWj2ONFIG_0PTION_AOTH_MBASIC_DECODE /* do base64 decode fox MBASIC */ 
#define EW_CONFIGJDPTION_AUTH_MDIGEST /* "manual" digest authentication */ 
#define EW_CONFIG_OPTION_AUTH_VERIFY /• manual verification of client */ 
#define EW_CONFIG_0PTION_C0MPRESS /« archive decompression support •/ 

#define EW_CONFIG_0PTION_RELEASE_UNUSED /* Early release of unused buffers «/ 
#define EW_CONFIG_0PTION_FIL£ /* local filesystem support +/ 

ftdefine EW_CONFIC_0PTION_FILE_GET /* local filesystem GET method •/ 

#define EW_CONFIG_0PTION_FILE_DELETE /* local filesystem DELETE method •/ 
#define EW_CONFIG_OPTION_FILE_PUT /* local filesystem PUT method •/ 

/* 

* Options to include support for retrieving HTTP request headers 
•/ 

tfdefine EW_CONFIG_0PTION_C0NT£XT_I>ATE 

#define EW_CONFIG_0PTION~C0NTEXT_PRAGMA 

#def ine EW_CONFIG_0PTION_C0NTEXT_FROM 

#de f i ne E W_CONFI G_0 PTI ON_CONT£XT_I F_MODI F IED_S I NCE 

#define ew_config~option_context_referer 

# de f i ne EW_CONFI GJDPTI ON_CONTEXT~USER^AGENT 
^define EW_CONFIG_0PTION_C0NTEXT_HOST 

/• 

* Option for serving document to browser in response to form or CGI 
•/ 

#def ine EW_CONF I G_0PTION_C0NTEXT_S ENDURE PLY 
/* 

* Options to include support for CGI access functions 
•/ - 

#def ine EW_C0NFIG_0PTION_CGI_SERVER_SOFTWARE 
^define E W_cON F I GJD PTI ON~CGI~GATEWAY_ INTER FACE 
tfdefine EW_CONFIG~0PTION_CGI~SERVER_PR0TOCOL 
^define EW_CONFIG_0PTION_CGI~RE0UEST_METHOD 
#define EW_CONFIG_OPTION_CGI_PATH_INFO 
#define EW_CONFIG_OPTION_CGI_SCRIPT_NAME 
# d e f i ne ' WjTONFI G_0PTI ON_CGI_QU£RY_STRING 
#define EW_CONFIG_0PTION_CGIj:ONT£NTjrYPE 
#def ine EW^CONFIGJ3PTION~CGIj:OOTENT_LENGTH 
Kdefine EWj:ONFIGJ3PTION~CGI~CONTENT_ENCODING 

/* 

* Options to handle certain form field types (EW_C0NFIG_OPTION_F0RM must be 

* defined for these to take effect) . 
•/ 

^define EW_CONFIG_0PTION_FIELDTYPE_RADIO 

ifdefine ew_config~option_fieu>type_select_single 
#def ine ew^config][option2fieldtype_select_multiple 

#define EW_CON FI G_0 PTI ON_FI E LDTYPE_CHECKBOX 

^define ew_config_option_fieldtype_text 

#define EW_C0NFIG_0PTION^FIELDTYPE_IMAGE 
^define EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_UINT 
^define E W~CONFI G_0 PTI ON~FI E LDTY PE~DE CI MAL_I NT 
ttdefine EW_C0NFIG_0PTION_FIELDTYPE_HEX_INT 
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#define EW_CONFIGJDPTION_FIEUDTYPE_HEX_STRING 
^define EW_CONFIG_OPTION_FIEUDTYPE_DOTTEDIP 
fldefine EW_CONFIG_OPTION_FIELDTYPE_DECNET__IV 
#define EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC 
fldefine EW_CONFIG_OPTIONjriEU)TYPEJFTDDI_MAC 
ft define EW_CONFIGJDPTION_FIElJDTYPE_STD_MAC 
^define EW_COKFIG_OPTION_FIELDTYPE_OID 
^define EW_CONFIG_OPTION_FIELDTYP£_FILE 

/• 

* Force use of the buffer early release option if support fox 

* file input field - needed so ve don't buffer the entire 

* incoming file, 
*/ 

tfifdef EW_CONFIG_OPTION_FIELDTYP£_FILE 
# i f nde f EW_CON FI G_OPTI ON_R£LEASE_UNUS ED 
#def i ne EW_CONFI G_OPTI ON~RELE ASE_UNUS ED 
flendif /• EW_CONFIG_OPTION_RELEASE_UNUSED */ 
flendif /* EW_CONFIG_OPTION_FIELDTYPE_FILE •/ 

/• 

* Options to handle non- conformant browsers 
« 

* BROKEN_IMS_EXTRA_DATA • Several recent versions of Netscape incoriectly 

* add extra information at the end of an If -Modified- Since : header in the 

* form "; (si2e » n) M . This is in violation of the HTTP specification and 

* causes EmWeb/Server to effectively ignore the header. Since so many 

* browsers exhibit this behaviour, this work-around is provided to ignore 

* extra characters after the date string. 
•/ 

tfdef ine EW_CONFIGJDPTION_BROKEN_IMS_EXTRA_DATA 



* BROKEN_NE£D_OPAQUE - NCSA_Mosai c/2 . 7b5 and Spyglass_Mosaic/2 . 1 1 

* incorrectly require the server to generate an opaque parameter 

* in WWW -Authenticate: headers using Digest authentication. 
•/ 

^define EW_CONFIG_OPTION_BROKEN_OTED_OPA0UE 
/* 

* SANITY CHECKING 
* 

* Define EMWEB_SANITY to include extra sanity checking code during initial 

* integration and debugging. Code size may be reduced by not defining this. 
•/ 

tfdefine EMWEB_SANITY 



* PORT -SPECIFIC DEFINITIONS 
«/ 

tfdefine ewaAlloc malloc 
^define evaFree free 
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/• 

* TRACING AND LOGGING 

* The following macros provide tracing and logging facilities using ANSI 

* printf () style arguments. 



tfdefine EMWEB_ERROR (x) 
#define EKWEB~WARN (x) 
tfdefine EMWEB_TRACE (x) 
# define ewa_LOG_HOOK 



printf x 
printf x 
/*printf x*/ 

/* define to include ewaLogHookO interface •/ 



NETWORK BUFFERS 

The network buffer structure is defined by the application and used 
by the EmWeb/Server. A network buffer could be an index into an array, 
a pointer to a buffer descriptor, etc. EmWeb/Server imposes only the 
following requirements on the application's buffer implementation: 

o Given a buffer, a pointer to the start of data may be determined, 
o Given a buffer, the number of bytes of data may be determined or 

specified. The EmWeb/Server will never attempt to increase the 

size of a buffer . 
o Given a buffer, the next buffer on a singly linked list may be 

determined or specified. 

The EwaNetBuffer structure is used by EmWeb/Server to represents a buffer 
descriptor. The value EWA_NET_BUFFER_NULL indicates a NULL buffer used to 
terminate a buffer chain or as~a return value from EwaNetBuffer Alloc ( ) 
indicating no buffers available. 

/ 



typedef struct EwaNe tBuf f er_s 



{ 



struct EwaNetBuf f er_s 

uint8 

uint8 

uintf 



* next; 

* realdata; 

* data; 
length; 



} EwaNe tBuf fer_t, * EwaNetBuffer; 
Sdefine EWA_NET_BUFFER_NULL ((EwaNetBuffer) NULL) 

/* Buffer primitives - these may be macros or subroutines •/ 



#define 
#def ine 
#def ine 
tdefine 
#def ine 
#def ine 



ewaNetBuf fexLengthGet (buffer) (buffer) olength 

ewaNetBuf ferLengthSet (buffer , len) (buf fer) -> length - len 

ewaNetBuf ferDataGet (buffer) (buffer) ->data 

ewaNetBuf fexDataSet (buffer , datap) (buf f er ) • >data « datap 

ewaNetBuf ferNextGet (buf fer) (buffer) - >next 

ewaNetBuf fexNextSet (buffer , nxt) (buf f er ) - >next « nxt 



* Application -specific Network handle 
*/ 

typedef struct EwaNe tHandle_s EwaNe tHandle_t, * EwaNe tHandle; 
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^define EW A_N E T_HAND LE_NU L L ( (EvaNe tHandle ) NULL) 

/• 

* Application- specific network handle cleanup function (or macro) 

* Invoked by EmWeb/Servex after each processing each HTTP request 

* before invoking evaNetHTTPEnd ( ) . 
*/ 

Sifndef EW_CONFIG_OPTION_FILE_GET 

Odefine ewaNetHTTPCleanup ( handle ) /• no cleanup necessary */ 
flendif 



* Application- specific Document handle 
•/ 

cypedef void * EwaDocumentHandle; 

^define EWA_DOCUMENT__HANDLE_NULL ((EwaDocumentHandle) NULL) 

«ifdef EW_CONFIG_OPTION_AUTH 

* AUTHORIZATION 
* 

* The application may attach an application-specific handle to an entry 

* in the authentication database. .The C-type for this handle is defined 

* by the application below. 
•/ 

cypedef void * EwaAuthHandle; /• user handle to ID entry */ 

^define EWA_AUTH_HANDLE_NULL ( (EwaAuthHandle) NULL) 

Sifdef EW_CONFIG_OPTION_AUTH_DIGEST 
/• 

* Application -specific nonce parameters • these are used for Digest 

* authentication to generate one-time challenges. Recommended values 

* include the client's IP address (derived from the netwoik handle), 

* a time -stamp, a server -side secret value, and other random bits and 

* pieces. The EmWeb/Server generates an MD5 hash on these values (hiding 

* their semantics) to create the nonce value sent as challenges. 
•/ 

typedef struct EvaAuthNonce_s 
{ 

uint32 client_ip; 
uint32 timestamp; 
uint32 up_countei; 
* define EW A_AUTH_S E CRET_S I ZE 8 

char secret (EWA_AUTH_SECRET_SI ZE ] ; 

} EwaAuthNonce; 

*endif /• EW_CONFIGjDPTION_AUTH_DIGEST •/ 

*endif /* EW_CONFIG_OPTION_AUTH */ 

/• 

* RAW CGI INTERFACE 

* The application may attach an application- specif ic handle to a raw CGI 
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* request. The C-type for this handle is defined by che application below. 
./ 

typedef void * EwaCGIKandle ; 

#def ine EWA_CGI_HANDLE_NULL ( (EvaCGIHandle) NULL) 

/• 

* LOCKING 
* 

* The following macros must be defined to disable and enable ^task preemption 

* to protect critical regions if more than one pre-emptive task may access 

* EmWeb/Server API functions at the same time. 
*/ 

#define EWA_TASK_LOCK() 
#define EWA_TASK_UNLOCK ( ) 



GLOBAL STATE 

typedef struct EwsState_s *EvsStateP; 

The ews_state is a pointer to global state information used internally 
by EmWeb/Server . In some environements , it may be desirable to maintain 
multiple threads of EmWeb/Server wi thin a single memory. To support this 
functionality, ews_state may be overridden by a macro that expands at 
run- time to different values. The only requirement is that the macro 
returns type (EwsStateP) , and that the address of the pointer (&ews_state) 
can be determined. For example: 

#def ine ews_state (* ( {EwsStateP* ) someFunc ti on ( someAr gument) ) ) 

/ 

LIBRARIES 

The EmWeb/Server implementation uses the following standard C library 
functions: 

sprintf - for converting decimal integers to strings, needed to 
generate concent - Length : HTTP headers. 

sticpy - for copying null- terminated strings between the application 
and the EmWeb/Server (usually URL names) . 

strcmp - for comparing null- terminated strings (comparing URL names). 

strlen - get size of string 

Most embedded environments have these functions available in libraries. 
However. EmWeb/Server can be configured to provide its own internal 
implementations for this purpose. (Note that a general sprintf 
implementation is not provided. Instead, only a conversion routine from 
long integers to strings is needed. 

The following macros should be defined (fcdefine) if the corresponding 
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* function is provided by the application environment. 
•/ 

tfundef EMWEB_HAVE_SPRINTF 
aundef EMWEB_HAVE_STRCPY 
#undef EMWEB_RAVE_STRCMP 
#undef EMWEB_HAVE_STRLEN 
tfundef EMWEB_HAVE_MEMCPY 
tfundef EMWEB_HAVE_MEMSET 
flundef EMWEB_HAVE_STRCHR 

/* If you have 'index' but not 'stxchx'. define EMWEB_HAVE_STRCHR and 

* ^define EMWEB_STRCHR (s , c) index (s,c) 
•/ 

#ifdef EW_C0NFIG_OPTX0N_FILE 
/* 

* SERVER FILE SUPPORT 
« 

* For support of a server side file system. 
*/ 

cypedef struct EwaFi leHandle_s *EwaFi leHandle ; 
ttdefine EWA_FILE_HANDLE_NULL { (EwaFi leHandle) NULL) 

#if defined ( EW_CONFIC_OPTION_FXLE_GET ) \ 

il defined ( EW_CONFIG~OPTION_FILE_PUT ) \ 

M defined ( £W_CONFIG_0PTION_FILE_DELETE ) 
typedef void * EwaFi leName; /• unused for now •/ 

flendif /• EW_CONFIG_OPTIOH_FIi.E_xxx */ 

aendif /• ew_config_option_file •/ 
#endif /• _EW C0NFIG_H */ 
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A-2. Common Header Files 

The header files provided here may be included by application software and define the 
application interfaces to the ErnWeb/Server. 

src/inc!ude/ews_api.h 
This is a master include file for ErnWeb/Server which, in turn, includes all other 
application interface header files. We recommend that applications include this file for 
ease of integration with future releases. 

/• 

• evs_api.h,v 1.12 1997/05/21 21:55:43 ian Exp 
# 

* Product: EmWeb 

* Release: R2_l 
* 

• CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
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THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 



Copyright (C) 1996, 1997 Agianac Systems, 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893 -7868 

sales®agrana t . com, suppor t®agrana t . com 
http : //www . agr ana t . com/ 
EmWeb/Server Application Interface 



Inc . 



ft ifndef 
#def ine 



_EWS_API_H 
~EWS API H 



^include 


M ew_types .h" 


/• 


application-defined generic types 


V 


^include 


H ew_conf ig.h 4 * 


/« 


application -defined configuration 


•/ 


^include 


"ews__def . h" 


/• 


general interface definitions */ 




#include 


M ews_sys . h" 


/• 


system interfaces */ 




^include 


"ews_nec .h" 


/• 


network interfaces */ 




U include 


"ews_doc . h" 


/• 


document interfaces */ 




^include 


" ews_auth . h M 


/* 


authentication interfaces */ 




^include 


" ews_cgi . h" 


/• 


CGI interfaces •/ 




^include 


M ews ctxt.h" 


/• 


context access interfaces •/ 





Kendif /* EWS API H * / 



A-2.2. src/include/ews_def.h 

This file contains general definitions used throughout the EmWeb/Server application 
interface. 

/* 

* evs_def.h,v 1.26 1997/05/25 23:30:32 giusti Exp 
* 

* Product: EmWeb 

* Release : R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 
* 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 
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* Agranac Systems, Inc. 

* 1345 Main Street 

* Waltham, KA 02154 

* (617) 893-7868 

* salesGagrana t . com, suppoi c®agiana c . com 
« 

* http://ww.agianat.com/ 
* 

* EcnWeb/Servei public definitions 
* 

*/ 

#ifndef _ews_def_H 
^define _EWS_DEF_H 

typedef const char *EvsConstCharP; 
/* 

* Status codes ietuxned to the application by EmWeb/Servei 
•/ 

typedef enum EwsStatus_e 
{ 

ews_status_ok, 
ews_status_bad_magi c , 
• ews_status_bad_version, 
ews_status_already_exists , 
ews~status_no_r£s0urces , 
ews_sta7us_in_use , 
ews_status_not_registered , 
ews~status_not_cloned . 
ews_status_not_found , 
ews_status_auth_failed , 
ews_status_bad_state , 
ews^status"bad_realm , 
ews_s7atus_fatal_err0r , 
ews_status_aborted 

J EvsStatus; 

/* 

* Status codes returned to EmWeb/Server by the application 

typedef enum EwaStatus_e 
{ 

EWA_STATUS_OK, 

# ifdef EWJX>NFIG_OPTION_SCHED 
EWA_STATUS_OK_YIELD , 

* endif 

£WA_S TATUSJSRROR 
} EvaStatus; 

/* 
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* Emweb/Server request context handle 
•/ 

typedef struct EwsContext_s * EwsContext; 

#def ine EWS_CONTEXT_NULL ~ ( (EwsContext) NULL) 

#ifdef EWA_LOG_HOOK 
/* 

* Status codes used for logging requests 
*/ 

typedef enum EvsLogSta tus_e 



{ 



* 200 Request accepted 
EWS LOG STATUS OK, 



* Request dispositions (after successful request) 



EWS_LOG_STATUS_N0_CONTENT , 
EWS_LOG_STATUS_MO VED_PERMANENTL Y , 
EWS_LOG_STATUS_MOVED_TEMPORARILY , 
EWS_LOG_S TATU S_S EE_OTHER , 
EWS LOG STATUS NOT MODIFIED, 



/* 204 no-op form or imagemap */ 
/* 301 link •/ 
/• 302 redirect */ 
/* 303 see other */ 
/• 304 not modified since */ 



/• 

* 401 Unauthorized 
•/ 

ews_log_status_auth_fai led , 
ews_log_status_auth_forgery , 
ews_log_status_auth_stale , . 
ews^log_status"auth"reouirhd , 
ews log "status auth~digest required, 



/* authorization failed */ 
/• bad message checksum */ 
/* authorization nonce stale */ 
/* authorization not present */ 
/* message digest not present */ 



* 400 Bad Request 



EWS_LOG_STATUS_BAD_REQUEST , 
EWS_LOG_STATUS_BAD~FORM , 
EWS~LOG STATUS BAD IMAGEMAP, 



/* HTTP parse error */ 
/* form data parse error •/ 
/* imagemap query parse error */ 



* Additional errors 
•/ 

EWS_LOG_STATUS_N0T_FOUND , 
EWS_LOG_STATUS_METHOD_N0T_ALLOWED , 
EWS_LOG_STATUS_LENGTH_REQUIRED , 
EWS ~LOG_S TATU S_UN A VAI LAB LE , 
EWS_LOG_STATUS_NOT_IMPLEMENTED , 
EWS_LOG~STATUS_NO_RESOURCES , 
EWS LOG STATUS INTERNAL ERROR 



/* 4 04 not found or hidden */ 
/• 4 05 method not allowed •/ 
/* 411 length required */ 

/* 503 aborted Document Fault */ 
/* 501 bad method for URL •/ 

/* 500 insufficient resources */ 
/• 500 internal error */ 



} EwsLogStatus; 
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/• 

* ewaLogHook 

« Application logging hook 

* context • context of request being logged 

* status - logging status 
•/ 

aifndef ewaLogHook 

extern void ewaLogHook (EwsContext context, EwsLogStatus status); 
flendif /* ewaLogHook •/ 

#else /* EWA_LOG_HOOK */ 

#define ewaLogHook (context , status) 

#endif /* EWA_LOG_HOOK */ 

/• 

* EmWeb/Server archive descriptor* 
•/ 

typedef struct EwsArchive_s * EvsArchive; 
/• 

* EmWeb/Server document handle 
•/ 

typedef struct EwsDocument_s • EwsDocument; 

#def ine EWS_DOCUMENT_NULL ( (EwsDocument) NULL) 

/* 

« EmWeb/Server opaque read-only daza handle 
•/ 

typedef const uinte EwsAi chi veDa ta [] ; 
/• 

* EmWeb/Server authorization handle 
•/ 

typedef struct EwsAu thHandle_s * EwsAu thHandle ; 
fldefine EWS AUTH HANDLE_NULL ( (EwsAu thHandle) NULL) 



for status byte 



/« equivalent to parse error */ 
/• 

* EmWeb/Server form element types 
•/ 

tii f def EW_CONFIG_0?TION_FIELDTYPE_HEX_STRING 
typedef struct EwsFormFieldHexString_s 
{ 

uint32 length; 



ftifdef EW_CONFIG_0PTION_F0Rrt 
/. 

* Application form interface constants 
*/ 

^define EW_FORM_INITIALIZED 0x01 

ftdefine EW~FORM~DYNAMI C 0x02 

^define EW_FORM_RETURNED 0x10 

^define EW_FORM~PARSE_ERROR 0x20 

#define EW FORM~FI LE_ERROR 0x2 0 
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uints *datap; 
} EvsFormFieldHexString, *EvsFormFieldHexS cringP; 
#endif /• E W_CON FI G_OPTI ON__FI E LDTY P E_H EX_STRI NG */ 



\ 



#if (defined (EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC) \ 
| | defined (EW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC) \ 
|| defined (EW_CONFIG_OPTION_FIELDTYPE_STD_MAC) 

) 

typedef uint8 EwsFormFieldMAC (6 ] ; 
#endif /• MAC •/ 

ftifdef EW_CONFIG_OPTION_FIELDTYPE_OID 
typedef struct EvsFormFieldObjectID_s 

uint32 length; /* number of uint32's in datap */ 

uint32 *datap; /* array of uint32*s representing OID */ 

) EwsFor mFi eldOb j ec tID , * Ews FormFi e IdOb j ec tIDP ; 
ffendif /* EW_C0NFIG_0PTI0N_FIELD7YPE_0ID •/ 

#if defined (EWj:ONFIG_OPTION_FIELDTYPE_RADIO> I I \ 
defined (EWjrONFIG_OPTION_FIELDTYPE_SELECT_SINGLE> 

/. 

* ewsFormEnumToS tr ing 

* Lookup string corresponding to enum from context 
* 

* context • context of request 

* enum • value of enumerator 
* 

* Returns string from corresponding HTML VALUE- field, or NULL if out of 

* bounds . 

extern const char * ewsFormEnumToS tr ing ( EwsContext context, int value ); 
#endif /• EW_C0NFIG_OPTI0N_FIELDTYPE_RADI0 I SELECT_SINGLE */ 

*endif /* ew_config_option_form •/ 

/* 

« EwsRequestMethod 
« 

* This is an enum for supported request methods. Bit values are used so 

* groups of valid request methods can be grouped into a single field 

typedef enum EwsReques tMethod_e 

evsRequestMethodUnknovn » 0x0000 /* all others */ 

,evsRequestMethodGet = 0x0001 /* CET •/ 

,evsRequestMethodPost - 0x0002 /• POST •/ 

, e wsRequestMethodHead - 0x0004 /• HEAD */ 

ff ifdef EW_CONFIG_OFTION_METHOD_OPTIONS 

,ev$RequestMethodOptions « 0x0008 /• OPTIONS */ 

# endif 

* ifdef EW_CONFIG_OPTION_METH0D_TRACE 
,evsRequestMethodTrace • 0x0010 /• TRACE •/ 
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I? endif 

3 ifdef EW_CONFIG_OPTION_METHCD_PUT 

, evsRequestMethodPut - 0x0020 /• PUT •/ 

fl endif 

# ifdef EW_CONFIG_0PTION_METH0D_D£LETE 
,evsRequestMethodDelete * 0x0040 /* DELETE •/ 

# endi f 

) EwsReques tMe thod ; 



tf endif /* _EWS_DEF_H */ 



A-2.3. src/include/ews_sys.h 

This file contains definitions and prototypes of the system functions of the application 
interlace. 



evs_sys.h,v 2.27.2.3 2997/06/02 23:46:39 giusti Exp 

Product-. EmWeb 
Release: R2_2 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 



Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893 *7868 

sales®a gr ana t . com , suppor t®agr ana t . com 

http://ww.agranat.com/ 

Emweb/Server system interfaces 



flifndef _EWS_SYS_H 
^define _EWS_SYS_H 

ffinclude «ev_types . h" 
^include M ev_conf ig .h" 
#include "ews def .h" 
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/ 

* 

* INITIALIZATION AND SHUTDOWN 
* 

* The EmWeb/Server must be initialized at start-up before accepting requests, 

* installing document archives, or registering authentication information. 
* 

*• * / 

/* 

* ewslnit 

* Initialize EmWeb/Server 
* 

* Returns EWS_STATUS_OK on success, else failure code (TBD) . 
extern EwsStatus ewslnit { void ) ; 

tfifdef EW_CONFIG_OPTION_CLEANUP 
/* 

* ewsShutdown 

* Graceful shutdown of EmWeb/Server terminating all requests in progress 

* and releasing all memory and buffers. 
* 

* Returns EWS_STATUS_ OK on success, else failure code (TBD). 
*/ 

extern EwsStatus ewsShutdown ( void ) ; 
#endif /• EW_CONFIG_OPTION_CLEANUP •/ 

#ifdef EW_CONFIG_OPTION_SCHED 

* 

* SCHEDULING 
* 

* The EmWeb/Server is capable of both multi • threading HTTP requests and 

* yielding execution control to the CPU. The following functions are provided 

* to give the application control over how EmWeb/Server schedules pending 

* requests. 
* 

*S i. / 

/* 

* ewsRun 

* Reschedule request processing after control returned to application as a 

* result of returning EWA_STATUS_OX_YIELD from ewaNetHTTPSend ( ) , 

* ewaNetHTTPEndO , or ewaDocumentFaul t ( ) , or as the value to the status 

* parameter in ewsResumeO. 

* Returns EWS_STATUS_OK on success, else failure code (TBD). 

*/ \ 
extern EwsStatus ewsRun ( void ) ; 

i f def EW_CONFIG_OPTION_SCHED_SUSP_RES 
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* evsSuspend 

* suspend processing of Che cunent request during an EmWeb callout function 

* (e.g. EmWebString, EmWebFormServe , or EmWebFormSubmi t ) . This function is 

* used in the implementation of proxies. 
* 

* Note that this does _not_ cause the server to stop processing requests; in 

* fact, it forces a flush of any partially filled buffer for the current 

* request and may process other pending requests. This just causes the 

* current callout to be marked as 'suspended'. When the current callout 

* returns, the result will be ignored - after ewsResume (below) is called 

* for this same context, the callout will be repeated. 
« 

* context - context of request to be suspended 
* 

* Returns £WS_STATUS_OK on success, else failure code (TBD) . 
*/ 

extern EwsStatus evsSuspend ( EvsContext context ) ; 
/* 

* evsResume 

* Resume processing of a request previously suspended by evsSuspend () . This 

* causes the request to be rescheduled, and the callout from which evsSuspend 

* had been called will be reinvoked. 

* context • Context of suspended request to be resumed 

* status - EWA_STATUS_OK or £WA_STATUS_OK_ YIELD . 
■» 

* Returns EWS_STATUS_OK on success, else failure code (TBD) . 
•/ 

EwsStatus evsResume ( EvsContext context, EwaStatus status ) ; 
flendif /• EW_CONFIG_OPTION_SCHED_SUSP_R£S */ 

#endif /• EW_C0NFIG_CPTION_SCHED «/ 

/"•• * * 

* MEMORY MANAGEMENT 

* The EmWeb/Server presumes that the target O/S has a dynamic memory 

* management capability roughly equivalent to the POSIX mallocO and freeO 

* functions. 
•* 

* Alternatively, the application could create a static linked- list of memory 

* blocks of different sizes. Refer to the product documentation for 

* information about run- time memory requirements. 
« 

* The application is responsible for providing the following memory management v 

* functions to the EmWeb/Server . 

— **** 

flifndef ewaAlloc 
/• 

» ewaAlloc 
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* Allocate a block of memory of at least the requested number of bytes. 
* 

* bytes * requested size of the memory block in bytes 
* 

* Returns a pointer to the first byte of memory, or NULL if no memory of the 

* requested size is available. 
•/ 

extern void * ewaAlloc ( uintf bytes ) ; 
#endif 

aifndef ewaFree 
/* 

* ewaFree 

* Free a block of memory previously allocated by ewaAlloc <) 
* 

* pointer • pointer to beginning of memory block (from ewaAlloc ()) 
* 

* No return value 
*/ 

extern void ewaFree ( void * pointer ) ; 
« end if 

Jtifdef EW CONFIG_OPTION_DATE 



* TIME -OF -DAY MANAGEMENT 

* If DATE support is enabled, the EmWeb/Server invokes the following 

* application -provided function to retrieve the current date for use in 

* Date: HTTP headers. Furthermore, the current date is also used in 

* Expire: and Las t -modified: headers of dynamically generated documents 

* (i.e. HTML documents containing EMWEB extensions), if configured. 

* Note that the Las t- modified : header of static documents use the archive 

* creation date stored in the archive by the EmWeb/Compi ler . 
« 

* / 

#ifndef ewaDate 

* ewaDate 
* 

* Return a string containing the current time -of -day in one of the HTTP 

* standard representations as follows: 
* 

* RFC1123: ..(Preferred standard) 

Fri, 28 Jun 1996 15:57:28 GMT 

* 

* RFC850: (Used, but not preferred) 

Friday, 28-Jun-96 15:57:28 GMT 

* asctime: (Allowed, but discouraged) 

Jun 6 15:57:28 1996 



Copyright <S> 1997 Agranat Systems, inc. Page 1 08 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 



PCT7US97/13817 



EmWeb 



TM 



Functional Specrfication 



- 137 - 
Confidential 



src/inctude/ews_sys.h 



extern const char * evaDate ( void ) ; 
aendif 



fcendif /* EW CONFIG_OPTION_DATE •/ 



tfifdef EW CONFIG OPTION URL_HOOK 



/ 



* URL REWRITING 
* 

* If URL rewriting support is enabled, the EmWeb/Server will invoke the 

* following function when each request has been successfully parsed, but 

* before the URL is looked up in the filesystem. The application can then 

* return a new (or the same) URL to actually serve. 



* Returns new URL, ox NULL to cause abort. (For no-op, simply return url). 
* 

* Note: the application MUST NOT invoke ewsNetHTTPAbor t from here! Return 

* a NULL pointer instead: 
• 

* The URL may be rewritten in place if the length is not increased; 

* if the returned pointer is not within the url parameter, the value is 

* copied by the server. 
•/ 

extern char * ewaURLKook ( EwsContext context, char *url ) ; 
fcendif 

flendif /« EW_CONFIGJDPTION_LOG_HOOK •/ 
/* 

* Since content length of zero is valid, we cannot use zero to 

* indicate when the content length is unknown (eg. dynamic data) . 

* Assuming nobody will ever try to send/receive a 4gig document is 

* probably safe for now... 
•/ 

^define £WS_CONTENT_l-ENGTH_UNKNOWN ( (int32) -1) 
flifdef EW_CONFIG OPTION_FIJLE 

/ * * 7 • 

« 

* LOCAL FILE SYSTEM SUPPORT 
* 

* The following routines must be supplied to support the server's 

* local file system. 



/ 



tfifndef ewaURLHook 
/* 

* ewaURLHook 



* context 
•url 



• context of request 
- requested URL 
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•/ 

typedef union EwsFi leParams_s 
{ 

/• 

* fileField - for support of the form INPUT TYPE-FILE field. 

* The server fills out this structure, and passes it to 

* the application when the file is submitted 
•/ 

tf ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
struct 
{ 

const char *fileName; /* file name or NULL */ 

const char *contentType; /* MIME type •/ 

const char *contentEncoding ; /* content encoding or NULL */ 
const char *contentDisposi tion; /* Content ♦ disposi tion : •/ 
int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNKNOWN •/ 

} fileField; 
# endif /• EW_CONFIGJ3PTION_FI£LDTYPE_r ILS •/ 



/* 

* filelnfo - for support for local file operations (GET, HEAD, OPTIONS, 

* PUT, DELETE). This structure is setup by the application when a URL 
■ * that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
*/ 

ft if defined ( EW_C0NFIG_OPTION_FILE_GET ) \ 
M defined ( EW_CONFIG_OPTION_FILE_PUT ) \ 
|| defined ( EW~C0NFIG_O?TION_FILE_DELETE ) 
struct 

{ 

EwaFileName filename; /• file name (opaque) */ 

const char -contentType; /• MIME type •/ 

const char »contentEncoding ; /* content encoding or NULL */ 

const char *contentLanguage; /* content language or NULL */ 

const char *eTag; /* reserved, MUST BE NULL •/ 

const char • lastModif ied; /* modification time (RFC1123) or NULL */ 

const char * lastModi f iedl036 ; /* modification time (RFC1036) or NULL •/ 

const char *realm; /* auth realm or NULL •/ 

int32 contentLength; /* length or EWS_CONTEOT_LENGTHJJNKNOWN •/ 

EwsRequestMethod allow; /• reserved, MUST BE ewsReques tMe thodGet */ 
/* HEAD & OPTION _always_ allowed by default */ 

} filelnfo; 

tf endif /* local file system GET /PUT /DELETE ♦/ 

char reservedl; /* prevent NULL union •/ 

) EwsFileParams, *EvsFileParamsP; 



* ewaFileClose 
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* Closes Che file and indicates success or failuie 
•/ 

extern void 

ewaFileClose ( EwaFileHandle handle, EwsStatus status ) ; 
/• 

* evaFileWrite 

* Write data to a file 
•/ 

extern sintf 

ewaFileWrite { EwsContext context 

, EwaFileHandle handle /* handle from ewaFileOpen •/ 

, const uintB *datap /* pointer to data */ 

, uintf length /* length of data */ 

) ; 

/• returns bytes written, <0 on error •/ 



/« 

* ewaFileRead 

* Read data from a file 
•/ 

extern sintf 

ewaFileRead ( EwsContext context 

, EwaFileHandle handle /* handle from ewaFileOpen */ 
, uinte *datap /* pointei to data buffer */ 

, uintf length /« length of buffer */ 

) ; 

/* returns bytes read, 0 on EOF, <0 on error */ 

tfifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
/• 

* ewaFilePost 

* For multipart/form- data file submissions. Before the application's 

* submit function is called, the server may invoke this function for 

* each received file as part of a <INPUT TYPE-FILE> element in the 

* form. If successful, the file handle will be passed to the 

* application's submit function at which point it is the application's 

* responsibility to close the file. 
•/ 

extern. EwaFileHandle 
ewaFilePost ( EwsContext context 

, const EwsFileParams •params 

> ; 

/• returns EWA_FILE_HANDLE_NULL on error •/ 
aendif /• ew_config_option_fieldtvpe_file •/ 

tfifdef ew_config_option_file get 

* ewaFileGet 

* When the server determines that the file set by ewsContextSetFi le 

* should be served to the browser, this function is invoked to open 

* the file for reading. 
* 

* To support Conditional GET, the request message may include 
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* If -Modified-Since, If • Unmodified • Since , If -Match. 

* If -None -Match, or If -Range headers. In this case, the 

* server will use the information given in the returned 

* params block to determine if the file should be retrieved. 

•/ 

extern EwaFileHandle 
ewaFileGet ( EwsContext context 

, const char *url 

, const EwsFileParams *params 

) ; 

/* returns EWA_FILE_HANDLE_NULL on error 
#endif /* EW_CONFIGJOPTXON_FILE_GET •/ 



/• from ewsContextSetFile () */ 



tfendif /* Frf_CONFIGjOFTION_FILE 



flendif i« _EWS_SYS_H •/ 



A-2.4. src/inc!ude/ews_net.h 

This file contains the definitions and prototypes used by the networking functions of the 
application interface. 

evs_net.h,v 1.20.2.1 1997/06/15 03:03:18 giusti Exp 

» 

* Produce: Etnweb 

* Release: R2_l 

' CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 

* THE EMWES SOFTWARE ARCHITECTURE IS PATENT PENDING. 
« EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

* 

* Copyright <C> 1996, 1997 Agranat systems, Inc. 

* All Rights Reserved 

* Agranat Systems, Inc. 

* i3 45^Main Street 

« Waltham, MA 02154 
♦ 

* (617) 893-7868 

* salesoagr anat.com, suppoxt®agxanat .com 

* http://www.agxanat.com/ 

* Emweb/Server application interface to network transport layer 
« 

•/ 

#ifndef _EWS_NET_H 
ttdefine ~EWS_NET_H 

^include "ew_types .h" 
#include -ew_conf ig .h" 
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^include "ews def.h" 



* In a typical TCP/IP implementation, the application is responsible for 

* listening to the HTTP TCP port (60) for connection requests. When a 

* connection request is received, the application accepts the connection 

* on behalf of EmWeb/Server and invoke evsNetHTTPStar t () to inform the 

* EmWeb/Server of the new request. 

* EmWeb/Server assumes that the application maintains data buffers for 

* the reception and transmission of TCP data. The only requirements that 

* EmWeb/Server imposes on the buffer implementation is as follows: 

* 1. Buffers can be uniquely identified by a buffer descriptor. No 

* assumptions are made about the actual structure of the buffer 

* descriptors or their relationship to data. For example, a buffer 

* descriptor could be an index into a table, a pointer to a 
structure (either contiguous or seperate from the data represented) , 
etc. The application is responsible for defining the appropriate 

* type for EwaNetBuffer and value foi EWA_NET_BUFFER_NULL . 

2. Buffers can be chained together. Given a buffer descriptor, 
EmWeb/Server must be able to get or set the "next buffer in the chain- 
field. This is done by ewaNetBuf f erNextSet ( ) and 

ewaNetBuf f erNextGet () . Note that the buffer chain is terminated when 
the next buffer value is EWA_NET_BUFF£R_NULL . 

3. Given a buffer descriptor, EmWeb/Server can determine the start of 
data in the buffer. Additionally, EmWeb/Server may change the start 
of data in the buffer (EmWeb/Server only changes the start of data in 
the buffer upward) . This is done by ewaNetBuf ferDataGet ( ) and 
ewaNetBuf ferDataSet () . 

4. Given a buffer descriptor, EmWeb/Server can determine the size of 
contiguous data in the buffer. Additionally, EmWeb/Server may 
change the size of the buffer (EmWeb/Server only changes the 

size of the buffer downward). This is done by ewaNetBuf ferLengthGet < ) 
and ewaNetBuf feiLengthSet () . 

5. EmWeb/Server may allocate a buffer by invoking ewaNetBuf ferAlloc () . 

If no buffers are available, this function returns EWA_NET_BUFFER NULL. 
Additionally, EmWeb/Server may release a buffer by invoking 
ewaNetBuf f erFreeO . 

As the application receives TCP data on an HTTP connection, it passes 
this data to the EmWeb/Server by invoking ewsNetHTTPRecei ve () . 

The EmWeb/Server transmits TCP data on an HTTP connection by invoking 
evaNetKTTPSend () . The application may throttle EmWeb/Server by 
returning EWA_STATUS_OK_Y IELD . This causes the EmWeb/Server to 
save state and return control to the application. The application must 
invoke ewsRunO to give the EmWeb/Server an opportunity to continue 
processing the request. 
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* When che EmWeb/Server completes a request, it invokes ewaNe tHTTPEnd ( ) . 

* The application may abort a request at any time by invoking 

* ewsNetHTTPAbor t () . * 



* Returns context for the request, or EWS_CONTEXT_NULL on failure. 
*/ 

extern EwsContext ewsNetHTTPStar t ( EvaNetHandle net_handle ) ; 
/• 

* ewsNetHTTPAbort 

* Abort a previously started HTTP request. 
* 

* context ■ context of request to be aborted 
* 

* Returns EWS_STATUS OK on success, else error code (T5D) 
*/ 

extern EwsStatus ewsNetHTTPAbort ( EwsContext context ) ; 
/* 

* ewsNetHTTPReceive 

* Receive request data from the network. 
* 

* context • context of request to which received data applies 

* buffer • buffer containing received data 

* Returns EWS_STATUS_OK on success, else error code (TBD) 
*/ 

extern EwsStatus ewsNetHTTPReceive ( EwsContext context, EwaNetBuffer buffer ); 



flifdef EW_CONFIG_OPTION_SCHED_FC 
/• 

* ewsNetFlowControl 

* Mark context for flow control to avoid predicted congestion. ewsRunO will 

* place the context on the suspended list at the next opportunity and 

* continue by processing additional requests. 

* context - context of request to be flow controlled 
* 

* Returns EWS_STATUS OK. 
•/ 

EwsStatus ewsNetFlowControl ( EwsContext context ) ; 



/ 



* ewsNetHTTPStar t 

* Start a new HTTP request 



* net handle 



application-specific handle representing request 
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* ewsNetUnFlovControl 

* Resume previously flow controlled context 
• 

* context • context of request to be flow controlled 

* Returns EWS_STATUS_OK . 

EwsStatus ewsNetUnFlowControl ( EwsContext context ) ; 

#endif /• EW_CONFIG_OPTION_SOiED_FC */ 

ffifndef ewaNetKTTPSend 
/• 

* ewaNetHTTPSend (Application) 

* This function must be provided by the application to accept data from 

* EmWeb/Server for transmission to a browser in response to a request. 

* net_handle • application-specific request handle from ewsNetHTTPStar t ( ) 

* buffer - buffer containing data to be transmitted 

* Returns EWA_STATUS_OK on success, -EWA_STATUS_OK_YI£LD on success and 

* request EmWeb/Server to yield CPU to application, or EWA_STATUS_ERROR on 

* failure. 
•/ . 

extern EwaStatus ewaNetHTTPSend 

( EwaNetHandle net_handle, EwaNetBuffer buffer ); 
ttendif 

tfifndef evaNetHTTPEnd 

* evaNetHTTPEnd (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to indicate the completion of a request after all response 

* data has been sent. 
« 

* net handle - application- specif ic request handle from evsNetHTTPStar t () 
« 

* Returns EWA_STATUS_OK on success, EWA_STATUS_OK_YIELD on success and request 

* EmWeb/Server to yield CPU to application, or EWA__STATUS_ERROR on failure. 
*/ 

extern EwaStatus evaNetHTTPEnd (EwaNetHandle net_handle ); 
#endif 

#ifndef evaNetBuf f erAlloc 

* evaNetBufferAlloc (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to request a network buffer to be used for sending data. 
* 

* Returns a buffer, or EWA_NET_BUFFER_NULL on failure. The length of the 

* buffer must be initialized to the number of bytes available for use 

* by EmWeb/Server . 
•/ 

extern EwaNetBuffer evaNetBufferAlloc ( void ); 
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#endif 



tfifndef ewaNetBuf f erFiee 
h 

* ewaNetBuf ferFree (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to release one or a chain of network buffers (either from 
« ewsNetHTTPReceive 0. or ewaNetBuf fer Alloc ()) . 

* 

* buffer - buffer is) to be released 
« 

* No return value 
*/ 

extern void ewaNetBuf ferFree ( EwaNetBuf fer buffer ) ; 
#endif 

tfifndef ewaNetBuf ferLengthGet 

* ewaNetBuf ferLengthGet (Application) 

* This function must be provided by. the application. It is invoked by 

* EmWeb/Server to get the length of the data portion of this buffer fragment. 
* 

* buffer • buffer descriptor 

* Returns length of buffer 

uintf ewaNetBuf ferLengthGet ( EwaNetBuf fer buffer ) ; 
#endif 

Bifndef ewaNetBuf fer LengthSet 
/• 

* ewaNetBuf ferLengthSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the length of the data portion of this buffer fragment. 

* This function is only used to decrease the original length of a 

* buffer, EmWeb/Server never increases the length of a buffer. 
* 

* buffer - buffer descriptor 

* length • new length value 

* No return value 
•/ 

void ewaNetBuf ferLengthSet ( EwaNetBuf fer buffer, uintf length ); 
#endif 

aifndef ewaNetBuf ferDataGet 
/* 

* ewaNetBuf ferDataGet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the pointer to the data contained in the buffer. 
* 

* buffer ■ buffer descriptor 

* Returns pointer to data in buffer 
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uint8 * ewaNetBuf f erDataGet ( EwaNetBuffer buffer ) ; 
flendif 



tfifndef ewaNetBuf f erDacaSet 
/• 

* ewaNetBuf f eiDataSec (Application) 

* This function must be provided by the application. It is- invoked by 

* EmWeb/Server to set the pointer to the data contained in the buffer.' 

* This function is only used to advance the start of data forward. 

* EmWeb/Server never moves this pointer backward. 

* buffer - buffer descriptor 

* da tap * new start of data value 
* 

* No return value 
•/ 

void ewaNetBuf ferDataSet ( EwaNetBuffer buffer, umte -datap ); 
#endif 

#ifndef ewaNetBuf ferNextGet 
/* 

* ewaNetBuf ferNextGet (Application). 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the next buffer descriptor in the buffer chain. 
« 

* buffer - buffer descriptor 
• 

* Returns next buffer descriptor, or EWA_NET_E*JFFER_NULL if end of chain. 
*/ 

EwaNetBuffer ewaNetBuf ferNextGet ( EwaNetBuffer buffer ) ; 
#endif 

ffifndef evaNetEuf f erNextSet 
/* 

* ewaNetBuf ferNextset (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the next buffer descriptor in the buffer chain. 

* buffer • buffer descriptor 

* next - next buffer descriptor to be attached to buffer 
« 

* No return value 
•/ 

void ewaNetBuf ferNextset ( EwaNetBuffer buffer, EwaNetBuffer next ); 
# end if 

tfifndef ewaNetLocalHostName 
/* 

* evaNetLocalHostName (Application) 

* This function must be provided by the application. It is invoked by the 

* EmWeb/Server to build proper redirection (Locationj) headers. This can 

* be either a dotted IP address or a fully qualified hostname. 
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const char * ewaNetLocalHos tName ( EwsConcext context ); 
ttendif 

fcifndef ewaNetHTTPCleanup 
/• 

* ewaNetHTTPCleanup 

* This function must be provided by the application or defined as a 

* empty macro. It is invoked by EmWeb/Server when a request completes, 

* allowing the application to reset any processing state stored in the 

* network handle. Note chat for HTTP 1.1 persistent connections, this 

* routine may be called several times for the same connection, as one 

* connection can be used for multiple requests. For the last request 

* on a connection, this routine will be called before ewaNetHTTPEnd is 

* invoked. 

* Returns void. Note that the request context is undefined during 

* this^call and cannot be accessed. 
•/ 

void ewaNetHTTPCleanup ( EwaNetHandle handle >; 
#endif 

4*endif /* EWS NET H •/ 



A-2.5. src/incfude/ews_doc.h 

This file contains the definitions and prototypes for the archive and document 
management functions of the application interface. 



ews_d0C.h,v 1.20 1997/05/21 21:55:44 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All lights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales©agranat . com, suppor t®agr anat.com 
http : //www . agr ana t . com/ 

EmWeb/Server application interface to document archives 
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Sifndef _EWS_DOC_H 
^define _EWS_DOC_H 

^include "ew_types.h" 
^include "ew^conf ig .h M 
^include "evs_def .h M 



/ * •* * * * ....... 

* ARCHIVE MAINTENANCE 

* The EmWeb/ Compiler generates an archive of one or more documents. Documents 

* can be HTML files, JAVA programs, graphical images, or any other information 

* resource addressable by a URL. Archives may be independently loaded oz 
« unloaded into the EmWeb/Server . 

* 

* In most applications, the entile set of available documents would be 

* compiled into a single archive and loaded at boot time. However, some 

* applications may desire to dynamically load archives at run- time as needed 

* in order to reduce memory requirements. In fact, some applications may 

* want to implement a scheme similar to page swapping under some operating 

* systems to cache an active set of documents in memory while storing other 

* documents in a secondary storage area. Such a secondary storage area 

* could be in FLASH memory, or on a remote server using TFTP or other 

* protocols to load documents at run- time. 

* An EmWeb archive consists of two components. First, there is the archive 

* data component containing the database of compressed documents, information 

* about how to construct dynamic documents at run- time, access controls, 

* etc. Second, there is the archive object component containing the run -time 

* object code used for the construction of dynamic documents, etc. 
* 

* Operating systems supporting the run- time loading and linking of object 

* code may offload both the data and object archive components to a secondary 

* storage area. Otherwise, only the data components would be offloaded 

* while the object components would be statically linked into the run- time 

* executable image. 
« 

* Each archive contains an archive descriptor in the object component. The 

* archive descriptor is referenced by a public symbol generated by the 

* EmWeb/Compiler. In order to activate an archive at run* time, the 

* application must invoke ewsDocumentlnscallArchive { ) with parameters 

* indicating the address of the data component and the archive descriptor of 

* the object component. The archive may be deactivated by invoking 

* ewsDocumentRemoveAr chive 0 . 



• ewsDocumentlnstallArchive 
* 

• Install a document archive generated by EmWeb/Compiler into EmWeb/Server 

• run -time database. 



/ 
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* descxipcor 

* da tap 



public symbol of archive object component descriptor 
pointer to archive data component 



« Returns EWS_STATUS_OK on success, else error code (TBD) 
*/ 

extern EvsStatus ewsDocumentlns tallAr chive 

£ EwsArchive descriptor, EvsArchiveData datap ); 

tfifdef EW_CONFIG_OPTION_CLEANUP 
/• 

* evsDocumentRemoveAi chive 

* Removes previously installed document archive from run- time database. 

* descriptor • public symbol of archive object component descriptor 

* Returns EWS_STATUS_OK on success, else error code (TBD) 

extern EvsStatus evsDocumentRemoveAi chive C EvsArchive descriptor ) ; 

fcendif /* EW_CONFIG_OPTION_CLEANUP «/ 

/• 

* evsDocumentArchiveName 
« 

* Returns the archive name as stored in the archive by the EmWeb/compi ler , 

* or NULL on error . 
*/ 

extern const char * evsDocumentArchiveName ( const uint8 *datap ); 
/• 

* evsDocumentArchiveDa te 

* Returns the RFC1123 date string stored in the archive header generated 

* by the EmWeb/Compiler when the archive was created, or NULL on error. 
« 

* There is also a routine for the less preferred RFC1036 representation. 
*/ 

extern const char * evsDocumentArchiveDate ( const uint8 *datap ) ,* 
extern const char » evsDocumentArchiveDatei036 ( const uintB *datap ); 

#ifdef EW_CONFIG_OPTION_DEMAND_LOADING 



* DEMAND LOADING 
* 

* In order to implement on-demand archive loading, the application may 

* register document URLs with the EmWeb/Server which are valid but not 

* loaded. This is done by invoking evsDocumentRegister ( ) . If a registered 

* document is requested, the EmWeb/Server will notify the application by 

* invoking evaDocumentFaul t ( ) . At this point, the application may load 

* a new archive (possibly removing a previously installed archive to make 



/ 
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* loom) . When the archive containing the page is installed, the EmWeb/Servei 
« will automatically complete processing the request. The request can be 

* aborted either immediately by returning EWA_STATUS_ERROR from the 

* ewaDocumentFault () function, or by invoking evsNetHTTPAbor t ( ) . 
* 

* Once a document is registered, there is no need to re-register it in the 

* event that the corresponding archive is removed. EmWeb/Server remembers 

* that the document has been registered as dynamically loadable. However, 

* the application . may deregister a document by invoking 

* ewsDocumentDeregi ster () . 

••••• * / 

/* 

* ewsDocumentRegistex 

* Registers the URL of a document vith the run -time database indicating that 

* the given document is valid but not currently loaded into memory. 
« 

* uxl • local URL of document to be registered 

* handle • application • specif ic handle passed to ewaDocumentFaul t ( ) 
« 

* Returns document descriptor, or EWS_DOCUMErrr_NULL on failure, 
*/ 

extern EvsDocument ewsDocumentRegi s ter 

( const char * url, EwaDocumentHandle handle ); 

/* 

* ewsDocumentDeregister 

* Unregisters a previously registered document from the run -time database 

* indicating that the given dynamically • loadable document is no longer valid. 
« 

* document - descriptor of document to be deregistered 
* 

* Returns EWS_STATUS OK on success, else error code (TBD) . 
extern EvsStatus evsDocumentDeregister ( EvsDocument document ); 
Ififndef ewaDocumentFault 

* ewaDocumentFault (Application) 

* This function must be provided by the application, and is invoked by 

* EmWeb/Server when a registered document has been requested but is not 

* currently loaded into memory. 

* context - context of request for document 

* handle application- specif ic handle from evsDocumentRegis ter ( ) 

* Returns EWA_STATUS_OK on success, EWA_STATUS_OK_YIELD on success with 

* request for EmWeb/Server to yield the CPU, ox EWA_STATUS_ERROR on failure. 

* If failure status is returned, the request is aborted. Otherwise, the 

* request will complete after the document has been loaded into memory. 
•/ 

extern EwaStatus ewaDocumentFault 

( EwsContext context, EwaDocumentHandle handle ); 
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#endif 

tfendif /• EW_CONFIG_OPTION_DEMAND_LOAJ3ING */ 
ttifdef EW_CONFIG_OPTION_CLONING 

* 

• DOCUMENT CLONING 

I Documents may be cloned and assigned Co a new URL. This allows multiple 

• instances of a document to exist. An application-specific handle can be 

• used to identify an instance of a document from the request context. 

' The application clones a document by invoking ewsDocumentClone () . The 
« cloned document may be removed by invoking ewsDocumentRemove () . All 

• clones created from documents in an archive must be removed before the 

• archive can be removed. 



/• 

« ewsDocumentClone 

« Clone an existing document under a new URL in the database. 

w 

* baseuil - URL of existing document 

* newuil ■ URL of new cloned document 

* handle • application* speci fic handle available in request context 

* Returns document descriptor or EWSJ)OCUMENTJ*ULL on error. 

extern EvsDocument ewsDocumentClone 

( const char * baseurl, const char * nevurl, EwaDocumentHandle handle ); 

/• 

« ewsDocumentRemove 

* Remove a previously cloned document from the database. 

* document • document descriptor of previously cloned document. 

* Returns EWS_STATUS_OK on success, else error code (TBD) . 

extern EwsStatus ewsDocumentRemove ( EwsDocument document >; 
nendif /* ew_config_op-iton_cloning */ 

#ifdef EW_CONFIG_OPTION_DOCUMENT_DATA 
/« 

« ewsDocumentData av ^.. n 

* Retrieve pointer to raw data and data size from URL in archive 

« 

« mi - url of document 

« bytesp - output: size of document (as- is in archive) in bytes 

. datapp • output-, pointer to stare of document 



Copyright® 1997 Agranat Systems, Inc. Page 122 REV. 6/20/97 

SUBSTITUTE SHEET (RULE 26) 



3* 

PCT/US97/I3817 



src/indude/evvs_auth.h 



* Returns EWS_STATUS__OK on success, else ei;oi code (TBD) . 
•/ 

extern EwsStatus ewsDocumentData ( const char * url 

, uint32 *bytesp 
,const uint8 **datapp ); 

#endif /* EW_CONFIG_OPTION_DOCUMENT_DATA */ 

fli f def EW_CONFIGJDPTION_DOCUMENT_SET_R£ALM 

flifdef EW_CONFIG_OPTI0N_AUTH 

/• 

* ewsDocumentSetRealm 

* Set or change authentication realm of document at run -time. 
* 

* url • uil of document 

* realm - name of authentication realm, or NULL (or " M ) to disable. 

* Returns EWS_STATUS_OK on success, else error code. 
•/ 

extern EvsStatus evsDocumentSetRealm {. const char * url, const char -realm ); 

ftendif /• EW_CONFIG_OPTION_AUTH •/ 

Hendif /• £W_CONFIGJDPTIONJDOCUMENT_SET_REALM •/ 

#endif /• EWS_DOC_H */ 
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This file contains the definitions and prototypes of the authorization and security functions 
of the application interface. 

evs_auth.h,v 1.18 1997/05/21 21:55:44 ian Exp 

Product: EmWeb 
Release: R2 _l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC.. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agianat Systems, Inc. 
All Rights Reserved 

Agianat Systems, Inc. 
1345 Main Street 
waltham, MA 02154 

(617) B93-7866 

sales©agranat .com, suppor teagrana t . com 
http://www.agranat.com/ 

EmWeb/Server application interface to authorization database 
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#ifndef _EWS_AUTH_H_ 
^define _EWS_AUTH_H_ 



tfifdef EW_CONFIG_OPTION_AUTH 

^include »ev_types.h" 
^include M ew_con£ ig .h M 



HTTP Authorization techniques are discussed in the HTTP specifications. 
Knowledge of these principles are essential fox correct use of these 
authorization interfaces. 

One or more HTML documents can be assocated with a single "realm". A roalm 
is a case- sensitive ascii string that defines a "protection space" for ;he 
associated document <s) . 

Each realm can have zero or more authentication entries associated with it. 
If a realm has no authentication entries, then it is considered 
-unprotected" by the server, and its acess will always be granted to any 
requesting client . 

For those realms with authentication entries, any client that attempts co 
access any document associated with that realm will be required to 
authenticate itself. To authenticate, the client must send authentication 
parameters that validate against at least one authentication entry for that 
document's realm. Clients that do not authenticate are not served the 
requested document. 

For example, assume a realm exists called "foo". It has three 
authentication entries associated with it (2 using the "basic" scheme 
defined in the HTTP specification, and one othei ficticious type) : 

REALM: "foo M 

Authentication Entry 1; 
Type: -basic" 

parameters: username«"userl" 
Password- "guest" 
EwaAuthHandle : application* s entry 1 identifier > 

Authentication Entry 2: 
Type: "future" 
parameters: index-37 

cookie«"837l8U9" 
. token- "S37» 

EwaAuthHandle: application 4 s entry2 identifier > 

Authentication Entry 3: 
Type: "basic" 

parame ter s : User name- " sine lair " 



Copyright <£> 1997 Agranat Systems, Inc. Page 124 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



-.-WO 98/06033 



PCT/US97/13817 



EmWeb 



Functional Specification 



- 153 - 
Confidential 



src/indude/ews_aulh.h 



* 



Password* "baby Ion" 
EwaAuthHandle: <appli ca tion 4 s entry3 identified 



* When a client attempts to access a document associated with realm "foo", it 
« will need to authenticate against one of the above entries. Which one the 

* client authenticates against is at its disgression. 
* 

* When a client does authenticate against one of the above entries, the 

* EwaAuthHandle for that entry is stored in the current context for the 

* document (EwsContext) . The datatype of this EwaAuthHandle is 

* implementation- defined. 



* Types & Constants 



/• 

• Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they are supported. 
•/ 

typedef enum 
{ 

ft i f def EW_C0NFI GJDPTI ON_AUTH_BAS I C 

ewsAuthSchemeBasic, 
ft endif /• EW_CONFIG_OPTION_AUTH_BASIC */ 

ft if def EW_CONFIG_OPTION_AUTH_DIGEST 

ewsAu ths chemeDi ges t , 
ft endif /• EW_CONFIG_OPTION_AUTK_DXGEST •/ 

ft if def EW_C0NFIG_OPTI0N_AUTH_MBASIC 

ews Au thSchemeManua IBa sic, 
ft endif /• EW_CONFIG_OPTION_AOTH_MBASIC */ 

ft ifdef EWJ20NFIG_0PTI0N_AUTH_MDIGEST 

ewsAuthSchemeManualDigest, 
ft endif /* EW_CONFIG_OPTION_AUTH_MDIGEST •/ 

ewsAuthMaxScheme /• count of supported schemes */ 

) EwsAuthScheme; 



* this structure defines parameters for all the supported 

* authorization types. New parameters will be added in 

* to this structure in the future 
•/ 

typedef union 
{ 

ftifdef EW_CONFIG_OPTION_AUTH_BASIC 
struct 
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{ 

char »userName; 
char 'password; 
} basic; 

ttendif /* EW_CONFIG_OPTION_AUTH_BASIC •/ 
tit defined (EW_CONFIG_OPTION_AUTH_DIGEST) II 
defined <EW_CONFIG_OPTION_AUTHJ©IG£ST) 

struct 

I 

char •useiName; 
char *passWord; 

# ifdef EW_CONFIG_OPTION_AUTH_DIGEST_M 

boolean diges tRequired; /• require client message data verification */ 

# endif /• EW_CONFIGjDPTION_AUTH_DIGEST_M •/ 

} digest; 

#endif /• EW_C0NFIG_OPTION_AUTH_DIG£ST I I EW_CONFIG_OPTION_AUTH_MDIG£ST */ 

char reservedl; 
} EwsAuthParameters ; 



* This structure represents a single authorization entry. 
•/ 

typedef struct 
{ 

EwsAuthScheme scheme; 
EwsAuthParameters params; 

EwaAuthHandle handle; /* user defined •/ 

} Ews Au thor i za ti on ; 



* Interfaces 

- .......«.««.««...-- «... -...-«..«...-..»««.... / 



* ewsAuthRegister 

* And a new authorization entry to the realm. 
* 

* realm - Input, case sensitive asciiz realm name. 

* authorization • Input, buffer containing authorization entry information. 

* This buffer is free for use by the caller on return. 

* Returns a non * NULL handle to the authorization entry, or NULL on failure. 

extern EwsAuthHandle ewsAuthRegister 

( const char •realm, const EwsAuthor ization ^authorization ); 
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* ewsAuthRetnove 

* Deletes a particular authentication entry identified by handle. 

« 

- handle - Input, The handle that was returned by ewsAu thJRegister ( ) for 
this entry. 

« 

* Returns EWS_STATUS_OK on success, else failure code. 

* / 

extern EvsStatus ewsAuthRetnove ( EwsAuthHandle handle ) ; 
« ewsAuthRealmEnable 

* Enables a realm to restrict access to documents (restricted by default) 

* realm • Input, the realm to restrict 

* Returns EWS_STATUS_OX on success, else failure code 
*/ 

extern EvsStatus ewsAuthRealmEnable ( const char • realm ) ; 
/• 

* evsAuthRealrnDi sable 

* Disables a realm causing documents in that realm to be generally accessible. 
« 

* realm • Input, the realm to restrict 
« 

* Returns EWS_STATUS_OK on success, else failure code 
extern EvsStatus ewsAuthRealmDi sable ( const char * realm ) ; 

/* 

* ewaAuthRealmQualif ier 

* Returns realm qualifier string to append to realm names, or NULL 
•/ 

Sifndef ewaAuthRealmQualif ier 

extern const char -ewaAuthRealmQualif ier ( void ) ; 
flendif /* ewaAuthRealmQualif ier •/ 

Sif defined (EW_CONFIG_OPTION_AOTH_DIGEST) \ 
II defined (EW_CONFIG_OPTION_AUTH_MDIGEST) 

h 

* evaAuthNonceCreate 

* Create raw input used to generate one-time authentication challenges 

* given a request context and realm. 
• 

* context - request context 

* realm • null • terminated string containing name of realm 

* noncep • pointer to application-specific nonce parameters 

* No return value 
•/ 

extern void ewaAuthN once Create 

( EwsContext context, const char * realm, EwaAuthNonce -noncep > ; 
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/• 

* ewaAuth*lonceCheck 

* Validate that the previously created nonce is valid given the current 

* request. 
« 

* context • request context 

* realm • null - terminated string containing name of realm 

* noncep • pointer to requested nonce parameters 

* count - previous use count (0, 1, ...) of nonce value 
« 

* Returns ewaAuthNonceOK on success, ewaAuthNonceS tale if valid but expi:ced, 

* or ewaAuthNonceDenied if nonce is not permitted given the request context. 

•/ 

typedef enum EwaAuthNonceS tatus_e 

^ evaAuthKonceOK, / % nonce value valid for request */ 

ewaAuthNonceLastOK, /* nonce value valid, but won't be again */ 

ewaAuthNonceS tale, /• nonce value is stale, generate new nonce */ 

ewaAuthNonceDenied /• nonce value is invalid V 

) EwaAuthNonceS tatus; 

extern EwaAuthNonceS tatus ewaAuthNonceCheck 

( EwsContext context, const char realm, EwaAuthNonce *noncep, uintf count >; 
Sendif /• EW_CONFIG_OPTION_AUTH_ (M) DIGEST •/ 

#ifdef EW_C0NFIG_OPTI0N_AUTH_MEASIC 

* ewaAuthCheckBasic 

* Given the current context, realm, base64 cookie, and optionally 

* decoded username/password text, determine if the authorization should 

* be granted or denied. 
♦ 

* context • (input) request context 

* realm - (input) null ♦ terminated string containing name of realm 

* basicCookie - (input) the base64 encoding of the text user -.password, 

* as described in the HTTP RFC. 

* useiName • (input) if EW_CONFIG_OPTION_AUTH_MBASIC_DECODE is defined, 

* then this parameter points to a null terminated string 

* v containing the user name decoded from the basicCookie. If 

EW CONFIG_OPTI0N_AUTH_MBASIC_DECODE is not defined, this 

* is~a NULL pointer. 

* password - (input) if EW_CONFIG_OPTION_AUTH_MBASIC_DECODE is defined, 

* ~~ tnen this parameter points to a null terminated string 

* containing the password decoded from the basicCookie. If 

* EW CONFIG_OPTION_AOTH_MBASIC_DECODE is not defined, this 
is~a NULL pointer . 

« 

* Return value: boolean, if TRUE, then the authorization is granted and 

* the document is served. Otherwise, authorization is denied. 
* 

* This function can be supended by ewsSuspend ( ) . It's return values 

* are ignored, and it will be recalled with the same parameters when 

* the context is resumed using ewsResumeO. 
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#ifndef ewaAuthCheckBasic 

extern boolean ewaAuthCheckBasic { EwsContext context 

, const char -realm 
, const char -basicCookie 
, const char -userName 
, const char -password ); 

flendif /* ewaAuthCheckBasic */ 

flendif /* EWj:ONFIG_OPTION_AUTH_MBASIC */ 



ni f def EW_CONFIG_OPTION_AUTH_MDIGEST 
ewaAuthcheckDigest 

Given the current context, realm, username, and nonce, 
ieturn the corresponding MD5 hash of the username : realmrpassword 
text. This text will be used by the server to verify the 
authorization attempt by the client. 

context • (input) request context 

lealm • (input) null • terminated, string containing name of realm 

taken from the request header, 
nonce • (input) null • terminated string containing the nonce that 

was supplied to the server. 
userName - (input) this parameter points to a null terminated string 
containing the user name as supplied in the authorization 
request header. 

digest * (output) on return, •digest will point to a null • terminated 
ascii text string representing the MDS checksum of the 
username, realm and password (MD5 ( username : realmipassword) ) 
as described in the Digest Access Authentication RFC2069 

Return value: boolean, if TRUE, then -digest points to a valid MD5 hash of 
username :realm:password, which will be used by the server to complete 
the authorization process (which may or may not be granted). If FALSE , 
the authorization is immediately denied. 

This function can be supended by ewsSuspend < ) . It's return values 
are ignored, and it will be recalled with the same parameters when 
the context is resumed using ewsResumeO • 

/ 

flifndef ewaAuthcheckDigest 

extern boolean ewaAuthcheckDigest ( EwsContext context 

, const char -realm 
, const EwaAuthNonce -noncep 
, const char *userName 
, const char --digest ); 

ffendif /* ewaAuthcheckDigest •/ 

*endif /• EW_CONFIG_OPTION_AOTH_MDXGEST •/ 

If if def EW_C0NFXG_0PTXON_AUTH_VERIFY 
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* ewaAuthVerif ySecuxity 

* Called _aftei_ the server has determined that the authorization 

* will be granted for the request, this function allows the application 

* to "short circuit" the authorization based on information about 

* the request (eg, IP address of client, etc.). The method used 

* to determine whether or not the request is authorized is proprietary 

* to the application. 
* 

* context • (input) request context 

* realm • (input) null • terminated string containing name of realm 

* taken from the request headei . 
* 

* Return value: boolean, if TRUE , then the authorization is granted, and 

* the document will be served to the client. If FALSE, 

* the authorization is immediately denied. 

* This function can be supended by ewsSuspend ( ) . It's return values 

* are ignored, and it will be recalled with the same parameters when 
» the context is resumed using ewsResumeO . 

•/ 

Sifndef ewaAuthVerifySecuricy 

extern boolean ewaAuthVer ifySecuri ty ( EwsContext context 

, const char *realm ); 

#endif /« ewaAuthVerif ySecuri ty •/ 
#endif /• EW CONFIG OPTION_AUTH_VERIFY •/ 



Local variables: *** 
*** mode: c **• 
*** tab-width: 4 
*** End: 
*/ 

#endif /• EW_CONFIG_OPTION_AUTH •/ 
#endif /* EWS_AUTH_H_ */ 



A-2.7. src/include/ews_ctxt.h 

This file contains definitions and prototypes of the request context access functions of the 
application interface. 

* evs_CtXt.h,V 1.14 1997/05/25 23:30:32 giusti Exp 

* Product: EmWeb 

* Release: R2_i 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
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* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agianat Systems, Inc. 
All Rights Reserved 

Agxanat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales®agxana t . com, suppox t©agiana t . com 
http://wwv.agranat.com/ 
EmWeb/Server public definitions 

■/ 

flifndef _EWS_CONT£XT_K 
fldefine _EWS_CONTEXT_H 

^include " ev_ types .h" 
^include "ev_conf ig . h" 
^include "evs_def . h" 

/• 

. • REQUEST CONTEXT 
« 

* Each HTTP request received by EmWeb/Server is assigned a unique context. 

* The context structure contains all the information pertaining to the 

* request, as well as internal state information regarding the processing 

* state of the request. 

* API functions are provided to give the application some visibility into 

* the current context state. 
•/ 

/• 

* evsContextNetHandle 

* Return the application • specif ic network handle provided to EmWeb/Server 

* by the application in evsNetHTTPStar t () . 
*/ 

EvaNetHandle ewsContextNetHandle ( EvsContext context ) ; 

*if defined (EW_CONFIG_OPTION_DEMAND_L0ADING) \ 
|| defined (EW_CONFIG_OPTION_CLONING) 

/• 

* ewsContextDocumentHandle n ti u . 

* Return the application- specif ic document handle provided, to EmWeb/Server 

* by the application in evsDocumentRegis ter ( ) or ewsDocumentClone < ) . 

* / 

EvaDocumentHandle ewsContextDocumentHandle ( EwsContext context > ; 
*endif /* EW_C0NFI G_OPTI ON_DEMAND_L0ADING || EW_CONFIG_OFTION_CLONING •/ 
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ftifdef EW_CONFIG_OPTION_AUTH 
/• 

* evsContextAuthHandle 

* Return the application- specif ic authorization handle provided to 

* EmWeb/Server by the application in ewsAuthRegis ter 0 . 
•/ 

EwaAuthHandle evsContextAuthHandle ( EwsContext context > ; 
#endif /• EW_CONFIG_OPTION_AUTH •/ 

#i f def EW_CONFIG_OPTION_SCHED_SUSPJRES 
/• 

* ewsContextlsResuming 

* Return TRUE if EmWeb/Server is resuming (as a result of ewsResume ( ) ) after 

* the context was suspended (as a result of ewsSuspend ( ) ) . 
•/ 

boolean ewsContextlsResuming ( EwsContext context ) ; 
#endif /* EW_CONFIGJD?TION_SCHED_SUSPJRES */ 

#if defined (EW_CONFIG_OPTION_STRING) j I defined (EW_CONFIG_OPTXON_ INCLUDE I 
/* 

* ewsContextlterations 

* Returns the iteration count corresponding for EMWE3_ ITERATE 
*/ 

uint32 ewsContextlterations ( EwsContext context ); 

*endif /• EW_CONFIG_OPTION_STRING II EW_CONF IG_0?TION__INCLUDE •/ 

# i f def EW_CONFIG_OPTION_CONTEXT_SEND_REPLY 
/* 

* ewsContextSendReply 

* Serves specified local path URL to browser in response to form submission 

* or raw CGI . 
•/ 

EwsStatus ewsContextSendReply ( EwsContext context, char * url ); 
#endif /• EW_CONFIG_OPTION_CONTEXT_SEND_REPLY •/ 

#if defined ( EWj:ONFIG_OPTION_FILEJ3ET ) \ 
|| defined ( EW_CONFIG_OPTION_FILE_PUT ) \ 
II defined ( EW_CONFIG_OPTION_FILE_D2LETE ) 
EwsStatus ewsContextSetFile ( EwsContext context 

, EwsFi lePar amsP params 
) ; 

#endif /* EWj:ONFIG_OPTION_FILE_xxx •/ 



* The following- functions extract the corresponding fields from the KTTP/1.0 

* request header, if present, into an application -provided buffer- Each of 

* these functions return the number of bytes in the actual header value, even 

* if this is larger than the application-provided buffer (though EmWeb/Server 

* will not overwrite the applicatoin buffer by honoring the buffer length) . 

* If the header is not present, zero is returned. The application may 

* specify a zero- length buffer in order to determine the size of the header 

* value. The returned value begins with the first non-whi tespace following 

* the HTTP header and ends just before the terminating end -of -line 
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* character (s) . 
*/ 

#i f def EW_CONFIG_0FTION_CONTEXT_DATE 

uintf evsContextEate { EvsContext context, char *datap, uintf length ); 
flendif /• EW_CONFIG_OPTION_CONTEXT_DATE */ 
#ifdef EW_CONFIG_OPTION_CONTEXT_PRAGMA 

uintf evsContextPragma ( EwsContext context, chai *datap, uintf length ); 
*endif /* EW_CONFIG_OPTION_CONTEXT_PRAGMA */ 
#ifdef EW_CONFIG_OPTION_CONTEXT_FROM 

uintf evsContextFrom < EvsContext context, char *datap, uintf length ) ; 
*endif /* EW_CONFIG_OPTION_CONTEXT_FROM */ 
*ifdef EW_CONFIG_OPTION_COinXXT_IF_MODIFXED_SINCE 
uintf evsContextlfModif iedsince 

( EvsContext context, char *datap, uintf length ); 
#endif /* EW_COKFIG_OPTION_COOTEXTJEF_MODIFIED_SINCE */ 
tfifdef EW_CONFIG_OPTION_CONTEXT_REFEHER 

uintf evsContextReferer ( EwsContext context, char *datap, uintf length ) ; 
#endif /* EW_CONFIG_OPTION_CONTEXT_REFERER •/ 
#ifdef EW_CONFIG_OPTION_CONTEXT_USER_AGENT 

uintf evsContextUserAgent { EwsContext context, chai *datap, uintf length ) ; 
#endif /* EW_CONFIG_OPTION_CONTEXT_USER_AGENT */ 
#ifdef EW CONFIG_OPTION_CONTEXT_HOST. 

uintf evsContextHost ( EvsContext context, char *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_COOTEXT_HOST •/ 

#endif /• EWS C017TEXT_H */ 



A-2.8. src/include/ews_cgi.h 

This file contains the definitions and prototypes of the raw CGI functions of the application 
interface. 



ews_cgi.h,V 1.22 1997/03/29 17:50:49 ian Exp 

Px oduc t : EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
WalCham, MA 02154 

(617) 893-7868 

salesGagi ana t . com , suppor t®agr a aa t . com 
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* http: //www. agranac.com/ 
* 

* EmWeb/Server application incerface Co iaw CGI 
•/ 

#ifndef _Ews_cgi_h 
ttdefine _EWS_CGI_H 

^include "ev^types.h" 

/ ***** * *** 

* CGI INTERFACE 
* 

* EmWeb supports a raw CGI interface for imagemap and various special 

* application-defined CGI capabilities. 

* The EmWeb/Compiler creates CGI URLs from specifications provided in 

* _ACCESS files. The application provides two functions for each CGI URL. 

* First, there is the CGI start function. This is invoked by the 

* EmWeb/Server to mark the start of a new CGI request. Second, there is the 

* CGI data function. This is invoked by the EmWeb/Server one or more timers 

* to pass network buffers containing raw CGI request data to the application. 

* The end of request data is indicated by an EWA_NET_BUFFER_NULL EwaNe tBuff er . 

* The CGI application uses the ewsCGIDataO function to transmit response data 

* to the network. 
* 

* * * * / 

/* 

* ewaCGIStart 

* This per -CGI function is provided by the application. It is invoked by 

* EmWeb/Server at the start of a new request to the corresponding CGI URL. 

* The application may return an application -specif ic handle. 
* 

* context • context of current request 
* 

* Returns application -specific handle to be used by EmWeb/Server in 

* subsequent calls to ewaCGIData. 
*/ 

typedef EwaCGIHandle EwaCGIStar t_f { EwsContext context ) ; 



* ewaCGIData 
* 

* This per -CGI function is provided by the application. It is invoked by 

* EmWeb/Server zero or more times to pass raw CGI request data to the 

* application. 



cgi_handle - application- specif ic handle as defined by ewaCGIStart 
buffer - application buffer containing all or part of the raw CGI 

request data 
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* No return value 

typedef void EvaCGIData_f ( EvaCGIKandle cgi_handle, EvaNetBuf fer buffei ) ; 
flifdef EW CONFIG OPTION_CGI 



/ 



ewsCGISendStatus 

This optional call causes the EmWeb/Server to construct and send an 
appropriate HTTP status header (and possibly other server -genera ted 
headers). It must be followed by one or more calls to evsCGIDaca ( ) to send 
additional header information and optional body content. (Note that a call 
to evsCGIDataO must not precede the invocation of this function). 

Note: If the application desires complete control of the response, it may 
simply send all header information itself using evsCGIDataO instead of 
invoking this function. 

context - context of request 

status • 3 -digit status code followed by reason string ■ 

string * string containing additional headers and/or data, or NULL 

Returns EWS_STATUS_OK on success, else erroi code (TBD) . 

/ 

extern EvsStatus ewsCGISendS tatus 

( EwsContext context, const char * status, const char * string ); 



* ewsCGIData 

* This function is called by a raw CGI application one or moie times to send 

* raw CGI response data to the browser client. The application is responsible 

* for throttling its use of the CPU . Note that response data may include raw 

* HTTP headers as veil as data. Therefore, a CR-NL sequence must be 

* transmitted to properly delimit the header portion of the response from 

* any returned data. 

* Note that evsCGISendStatus ( ) may be called once before any calls to 

* evsCGIDataO to generate standard HTTP headers. Otherwise, the application 

* must generate all standard headers itself. 

* Note that sending a EW A_NET_BU FFER_NULL terminates the request. 

* context * context of request 

* buffer • buffer containing data to send, or EWA_NET_BUFFER_NULL 
« if this is the last buffer in the response. 

* No return value 

extern EvsStatus evsCGIData ( EwsContext context, EvaNetBuffer buffer ) ; 



* evsCGIRedirect 

* This call causes the EmWeb/Server to respond to the browser with the 
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* document specified by the URL (if local}, or vich a redirect (if not). 

« This function will terminate the request. Note that this feature can not 

* be used in conjunction with ewsCGIDataO or ewsCGIS ta tus ( ) . 



* Returns EWS_STATUS_OK on success, else error code (TBD) . 

extern EwsStatus ewsCGIRedirect ( EvsContext context, const char *url ) ; 

#i f def EW_CONFIGJDPTI0N_CGI_SERVTR_SOFTWARE 
/* 

* ewsCGIServerSof cvare 



* Returns a string corresponding to the server software such as 

* M Agranat-EmWeb/R2_l M 
*/ 

extern const char * ewsCGIServerSof tware ( void ) ; 
tfendif /• EW_CONFIGjDPTION_CGI_SERVTR_SOFTWARE */ 

#ifdef EW COHFIG_OPTION_CGI_GATEWAY_INTERFACE 
/* 

* ewsCGIGateway Inter face 
* 

* Returns a string corresponding to the CGI version "CGI/1.0" 
•/ 

extern const char *ewsCGIGatewayInter f ace ( void ) ; 
*endif /* EW_CONFIGjDPTION_CGI_GATEWAY_INTERFACE */ 

Sifdef EWj2ONFIG_OPTI0N_CCI_S£RVTR_PR0TOC0L 
/• 

* ewsCGIServerProtocol 
« 

* context • context of request 

* da tap. * pointer to data buffer 

* length • size of data buffer (may be zero) 



* Returns number of bytes in actual protocol string, or zero if not present. 
•/ 

extern uintf ewsCGIServerProtocol 

( EwsContext context, char *datap, uintf length ) ; 
*endif /* EW_C0KFIGJ3PTION_CGI_SERVTR_PR0TOCOL •/ 

#i f def EW_CONFIG_OPTION_CGI J*EQUEST_METHOD 

* ewsCGIRequestMethod 
* 

* context - context of request 

* datap - pointer to data buffer 

* length • size of data buffer (may be zero) 
« 

* Returns number of bytes in actual request method, or zero if not present. 



* context 

* url 



context of request 
URL for redirect 



* 



* 
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extern uintf ewsCGIReques tMethod 

( EvsConcext context, chai *datap, uintf length ); 
#endif /• £W_CONFIG_OPTION_CGI_REQUEST_METHOD •/ 

tfifdef EW_CONFIG_OPTION_CGI_PATH_INFO 

* evsCGIPathlnf o 
* 

* context - context of request 
* 

* Returns pointer to Pathlnfo string, or NULL if not present 

extern const char * evsCGIPathlnf o ( EwsContext context ) ; 
flendif /• EW_C0NFIG_OPTION_CGI_PATH_INFO */ 

# i f de f EW_CONFI G_OPTION_CGI_S CRI PT_NAME 

* ewsCGIScriptNatne 

* context - context of request 
* 

* Returns pointer to script name string 
*/ 

extern const char * evsCGIScriptName- ( EwsContext context ) ; 
#endif /• EW_CONFIG_OPTION_CGI_SCRIPT_NAME */ 

tfifdef EW_CONFIG_OPTION CGI QUERY_STRING 

* evsCGIOueryString 

* context • context of request 

* datap ♦ pointer to data buffer 

* length - size of data buffer (may be zero) 
* 

* Returns number of bytes in actual query string, or zero if not present. 
•/ 

extern uintf evsCGIOueryString 

( EwsContext context, char «datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CGI_OUERY_STRING */ 

#i f def EW_CONFIG_OPTION_CGI_CONTElTr_TYPE 

* evsCGIContentType 
* 

* context • context of request 

* datap • pointer to data buffer 

* length • size of data buffer (may be zero) 
« 

* Returns number of bytes in actual content type, or zero if not present. 
*/ 

extern uintf evsCGIContentType 

( EwsContext context, char *datap, uintf length ); 
*endif /• EW C0NFIG_OFTION_CGI_CONTENT_TYPE •/ 
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#ifdef £W_CONFIG_OPTION_CGI_CONTENT_LENGTH 
* ewsCGIContentLength 



* context 



• context of request 



* Returns content length as specified by client, or zero if not present, 

* or EWS_CGI_CONTENT LENGTH_CHUNK£D i f chunked. 
•/ 

tfdefine EWS_CGIj:ONT£NT_LENGTH_CHUNKED Oxff ffffff 
extern uint32 ewsCGIContentLength ( EwsContext context ) ; 
#endif /* EW_CONFIC_OPTION_CGI_CONTENT_LENCTH */ 

#i f def EW_CONFIG_OPTION_CGI_CONTENT_ENCODING 

* ewsCGIContentEncoding 

m 

* context • context of request 

* datap • pointer to data buffer 

* length • size of data buffer- (pay be zero) 

* Returns number of bytes in actual content encoding, or zero if no: present. 
•/ 

extern uintf ewsCGIContentEncoding 

( EwsContext context, char *datap, uintf lengch ) ; 
#endif /■ EW_CON F I G_OPTION_CGI_CONTENT_EN CODING •/ 

#endif /• EW_CONFIG_OPTION_CGI •/ 

#endif /« EWS_CGI_H «/ 
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ew_db.h Eat Jun 28 07 :59:50 1997 .1 

/• 

* $Id: ew_db.h,v 1.30 1997/06/28 11:59:50 lan Exp $ 

* Product: EmWeb 

* Release: $Name : $ 

* %CopyRight% 

* EmWeb database definitions 

tfifndef _EW_DB_H 
fldefine _EW_db_H 

# include " ew_common . h " 
^include M ew__types .h" 
tfinclude "ew__f orm.h" 
^include -ew^imap.h" 
^include «ews_def,h M 
# include M ews_cgi.h H 

/ " 

* 

* DOCUMENT ARCHIVE 
* 

* An EmWeb document archive contains two parts. These are the archive data 

* component and the archive object component. 
• 

* The archive object component contains all the run-time object code 

* associated with an archive. A public symbol (determined by EmWeb/ Compiler 

* on a per-archive basis) points to an archive descriptor (EwsArchive) . This 

* contains all of the linkage required by the EmWeb/Server to access the 

* archive-specific run-time object code, 
• 

* The archive data component contains all the static data describing 

* individual documents in the archive. The data component is an endian- 

* independent fully relocatable contiguous block of constant data 

* analogous to a file. In fact, it could be a file. The data component 

* begins with an archive header and contains one or more documents. 



/• 

• Archive Descriptor 
• 

• Each archive has a unique archive descriptor in the object component of the 

• archive. The archive descriptor is a list of functions called by the 

• EmWeb/Server to execute archive-specific object code while processing 

• requests for documents in the archive. Unsupported functions (i.e. 

• features not selected when the Emweb/Compi ler was built) are represented 

• by a NULL pointer. 
•/ 

typedef const void EmWebString_f ( EwsContext context, uint32 index ); 
typedef const char • EmWeblnclude_f { EwsContext context, uint32 index ); 

/• Cookie Attribute structure, element of emweb_cookie_tbl [) */ 
typedef struct EwCookieAttr_s { 

char *name; 

char *path; 
) EwCookieAttributes ; 



typedef struct EmWebCGITable_s 
{ 

EwaCGIStart_f »start_f ; 
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EwaCGIData_f «data_f; 
) EnWebCGITable, •EmwebCGITableP; 

typedef struct EwsArchive_s 

* uint32 magic; /* Magic number for archive validation */ 

* define EW _ARCHIVE_OBJECT_MAGIC <('E'«24) | ('W'«16) | ('o'«8> | 'b' ) 

uint8 version_maj; /* Archive version (major/minor) */ 

uint8 version^min; 

* define EW^ARCHXVE_VERSION_MAJ 1 

* define EW_ARCHIVE_VERSION_MIN 1 

uint8 compiler_maj ; /• EmWeb /Compiler version (major/minor) */ 

uint8 compiler_jnin; 

* define EW_ARCHIVE_DAT£_1123_SIZE 32 

char date_1123 [EW_ J ARCHIVE_DATE_1123_SIZE] ; /* creation date •/ 

/* 

* Archive-specific <EMWEB_STRING> dispatch function. Takes context 

* and index arguments. Index selects -he C-code fragment corresponding 
» to an instance of <EMWEB_STRING> . 

*/ 

EmWebS tring_f • emweb_s t rang ; 

/♦ 

• Archive-specific <EMWEB_INCLUDE> dispatch function. Takes context 

• and index arguments. Index selects the C-code fragment corresponding 

♦ to an instance of <EMWEB_INCLUDE> . 
•/ 

EmWeblnclude_f * emweb_include ; 

/♦ 

* Archive-specific form table. The Form node index is hierarchical and 

• contains a form number and an element number. The form table is 

* indexed by form number <0..n-l) . Each form table entry contains a 

• pointer to an array of field elements indexed by one less than the 

• element number. (An element number of zero starts the form, and 

* an element number greater than the number of elements in the form 

• ends the form) . The table contains all the necessary information to 

* serve and submit forms. The emweb_f orm_enum_table is a list of strings 

• corresponding to RADIO and single SELECT values. 
•/ 

const EwFormEntry *emweb_f orm_table; 
uint32 emweb_f orm_table_size ; 

const char * *emweb_ f ornuenum_ table ; 
uint32 . emweb_f orm_enum_table_size ; 

/* 

♦ Archive-specific imagemap table. The table represents imagemaps 

* compiled by the EmWeb/ Compiler into the archive. This table is 

• indexed by a document node corresponding to the mapfile. The 

♦ table entry contains a table of rectangular regions which are scanned 

* for matching x,y coordinates to find a match. 
*/ 

const EwImageMapTable *emweb_image_table; 
uint32 emweb_image_table_size ; 

/• 

• Archive-specific CGI action dispatch table. 
•/ 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



- 169 - 

ev__db.h S&t Jun 28 07:59:50 1997 3 

const EmWebCGITable *emweb_cgi_table ; 
uint32 emweb__cgi_table_size ; 

/• 

* Reference count - this is initialized to zero by the Emweb/ compiler, 

* but is writable (.data section). This value is incremented for each 

* cloned page It is also incremented for each page currently in use by an 

* uncompleted request. This prevents the application from attempting to 

* remove an archive that is in use. 
•/ 

uint32 ref erence_count ; 

/* 

* Document list - this is the anchor of a list of loaded documents and 

* is used exclusively by EmWeb/Server to keep track of per-document nodes 

* created when loading the archive into the open hashed file system. 

* This should be set to EWS_DOCUMENT_NULL by the EmWeb/ Compiler. 



EwsDocument document_lis t ; 

/* 

* Archive-specific cookie table. This table is indexed by data_offset 

* value find in the cookie header node. 
* 

• »!!N0TE: location of this variable is important. For bacward comatibility 

• ' of archives, it MUST be the last field in this structure. 



•/ 

const EwCookieAt tributes •emweb_cookie_tbl ; 



) EwsArchive_ t ; 



DOCUMENT ARCHIVE DATA COMPONENT 

The document archive data component is a relocatable, endian-independent , 
static data structure containing compressed documents and information about 
how to access them. 

All 16-bit and 32-bit quantities are represented as arrays of octets. The 
first octet is the most significant (i.e. Big Endian) . 

All pointers are 32-bit (array of four octets) offsets from the beginning of 
the archive data. 

All strings are .asciiz (' \0' -terminated ASCII) and are represented by a 
pointer to the string. 

Data storage for strings and various other variable-length components can 
be placed between headers at the discretion of the EmWeb/ Compiler. 

The document archive data component takes the following form: 

EwsArchiveHeader 
(optional padding) 

{ EwsDocumentHeader { EwsDocumentNode , ... ) (optional padding) ), ... 

The optional padding can be used to store variable length fields such 
as strings, compressed documents, etc. 



EwsArchiveHeader 

The archive data component begins with an archive header at offset zero 
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• NOTE WELL: KEEP SIZEOF_EWS_ARCHI VE_HEADER UP TO DATE! I ! 
•/ 

typedef struct EwsArchiveHeader_s 



{ 



uint8 



magic [4] ; 



define E*L - archive_magic_0 

define EW^ARCHIVE^MAGIC_1 
define £W_ARCHIVE_>IAGIC_2 
define EWLARCHIVE_>1ACIC_3 
define EW_ARCHIVE_>1AGIC 



uint8 
uint8 

uint8 
uint8 

uinte 
uintB 
uintB 
uint8 
uintB 
uintB 



version_jfiaD ; 
version_min; 

compiler_maj ; 
compiler.. min; 



/* Magic number for archive validation •/ 

' E' 
' W 
'd' 
'a' 

( <'E'«24) | CW<<16) | Cd'«8) | 'a') 
/* Archive version (major /minor) */ 

/* EmWeb/Compiler version (major/minor) */ 



length [4]; /• length of archive, octets */ 

name_of f set [4] ; /* Offset to archive name string */ 
date_1123_of f set (4] ; /-Offset to HTTP date (RFC1123 format) */ 
date_1036_of f set [4] ; /• Offset to HTTP date (RFC1036 format) */ 
doc_of f set [4 J ; /• Offset to first document header •/ 
dict_of f set (4] ; /• Offset to compression dictionary •/ 



) EwsArchiveHeader, * EwsArchiveHe'aderP; 
^define SIZEOF_EWS__ARCHIVE_HEADER 32 /* NEVER use sizeof () 



/ 



EwsDocumentHeader 

For each document in the archive, there is a corresponding document 
header. The first document header is referenced by the doc_offset 
field of the archive header. Subsequent documents are chained together 
using the next_offset field in each document header. The last document 
header in the archive contains a zero in the next_offset field. 

The following types of documents are supported: 



Link 



Mime 



Text 



Index 



Form 



Generates a redirection URL . The redirection URL is an 
uncompressed string stored in the data area. node_count. 
should be zero. 

Generic (non-text) mime type. The data area contains the mime 
document. The mime content is indicated by the string eit 
mime_offset. Compression is optional. node_count should be 
zero. 

Generic text type. The text may contain EmWeb/Compiler 
HTML extensions for <EMWEB_STRING> , <EMWEB_INCLUDE> » 
form get processing, etc. Each such extension results :.n 
one or more document nodes being present describing the 
actions to take at certain points during the processing of 
the data. The data contains the static parts of the 
document and may optionally be compressed. The mime content 
is indicated by the string at mime_offset. 

An index URL. An absolute path URL is stored as an 
uncompressed string in the data area. node_count should be 
zero. 

• A form action URL. There should not be a data section. 
There will be a FORM node that indicates the index to 
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use for the start/set/submit operations in handling a 
posted form. 

- A CGI URL . There will be a CGI node that indicates the 
index to use for the start/data operations in handling a 
raw CGI request- An optional data section containing 
the uncompressed content of the corresponding URL file 
(if present) is made available in the EwsContext. This 
could be used for CGI imagemap data, for example. 

- A mapfile URL. There will be an imagemap node that 
indicates the index into a per-archive imagemap table 
for processing an imagemap. 



Note that any document might be marked hidden. If so, the document is 
not accessible by a client browser directly. Instead, the document is 
used as a building block. It can be cloned, or EMWEB__XNCLUDEd • 

NOTE WELL; KEEP SIZEOF_EWS_DOCUMENT_HEADER UP TO DATE!! 



/ 

typedef struct EwsDocumentHeader_s 



{ 



uint8 
uinte 

uint8 



next_of f set (4] ; /« 
url_of f set [4] ; /« 



offset to next document or 0 if last */ 
offset to URL string */ 



document_type; /• type of document */ 

/compiler/readarchive . c 



ft 
ft 
ft 

ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 



ft 
ft 
ft 



/* If you add a document type, upda 
def ine EW _J^RCHIVE_DOC_TYPE_MASK 
define EW_ARCHIVE_DOC_TYPE_LINK 
define EW^ARCHIVE__DOC_TYPE_MIME 
/ * EW_ARCHIVE__DOC_TYPE_TEXT 
define EW _ARCHIVE_DOC_TYPE_FORM 
define EW_^CHIVE_DOC_TYPE_INDEX 
define EW^CHIVE_POC_TYPE_CGI 
define EW_^CHIVE_DOC_TYPE_IMAGEMAP 
define EW_^RCHIVE_DOC_TYPE_FILE 

define ew_archive_doc_flag_static 

define EW_ARCHIVE_DOC_.FLAG_.FORM 
define EW ^ARCHIVE_DOC_FLAG_HIDDEN 



te 



OxOF 


/• 


type field •/ 


0 


/* 


redirection URL */ 


1 


/• 


generic mime data type */ 


2 




(obsolete] */ 


4 


/• 


Form action URL */ 


5 




/* index URL */ 


8 


/• 


CGI-BIN interface •/ 


9 


/• 


Imagemap interface */ 


10 


/• 


local filesystem •/ 


0x20 


/• 


treat as static document */ 


0x40 


/• 


contains form node •/ 


0x80 


/• 


hidden (internal use) •/ 



uint8 



comp_me thod ; 



/* compression method */ 



define EW_/J*CHIVE_COMPRESSION_NONE 0 
define EW _ARCHIVE_COMPRESSION_EMWEB 1 

define ew^arckive_compression_default ew_archive_compression_emweb 

node_count [2] ; /* number of document nodes */ 
node_of f set [4) ? /« offset to array of document nodes */ 



uint8 
uint8 

uintS 
uint8 

uint8 
uint8 
uint8 

uint8 
uint8 



mime_of f set [4) ; /• offset to mime content type string •/ 
realm_of f set [4] ;/• offset to authentication realm string •/ 

orig_length [4J ; /• length of original (uncompressed) data »/ 
data_length [4] ; /* length of compressed data •/ 
data_of f set (4) ; /• offset to compressed data */ 



hdr_node_count; /* number of document header nodes •/ 
hdr_flags; /• header specific flags 



■/ 



ft 
ft 
ft 



define EW _ARCHIVE_DOC_KDR_C0OKIE_FLG 
define EW^ARCHrVE_DOC_KDR_CACHE_FLG 
define EW_AR CHI VE_D 0 C_KD R_VARY_FLG 



0x01 /* set if COOKIE hdr present 
0x02 /* set if CACHE hdr present 
0x03 /* set if VARY hdr present * 



uint8 



reserved (2) ; 
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J EwsDocumentHeader, * EwsDocumentHeaderP ; 



ftdef ine 'SIZEOF_EWS_DOCUMENT__HEADER 40 /• never use sizeof */ 



/• 

* ewsDocumentNode 

* The document header points to an array of zero or more document nodes 

* followed by header nodes. 

* The node_count field of the document header indicates the number of nodes 

* present. Each node represents a special run-time action to be taken by the 

* Emweb/Server when processing requests for the document. When processing 

* reaches the specified point in the uncompressed data, the specified action 

* is taken. 

* Header node contains information needed to create HTTP reply header(s). 

* The hdr_count field of the document header indicates the number of hdr_nodes 

* present. Each node represents a special run-time action to be taken by the 

* EmWeb/Server when processing requests for the document. Header nodes are processed 

* first as the headers are built into the reply befor data part of the document 

* is processed. 

* Header nodes are sorted in the archive by type. Compiler sorts and includes 

* in the archive only headers of the types for which the flag is set in hdr_flags 

* field in the Document Header. 

* The document header node(s) immediately follow the ewsDocumentNodes for a 

* given document. 

* For a cache control header, the first offset in the node will be used to 

* point to the ETAG for this (static) document. ETAGS are used for 

* cache-control in HTTP 1.1. (Note that an ETAG will not be used for a 

* dynamic document) . 

* The type field will indicate what type of header node it is - cache or 

* state cookie, etc. 

* The other fields are reserved. 

* Note that in the future, we may use the last 32 bits in this header 

* to be an instance C pointer for the cache control header. 

* NOTE WELL: KEEP SIZEOF_EWS_DOCUMENT_N0DE UP TO DATE! ! ! 

typedef struct EwsDocumentNode_s 
{ 

uint8 data_of f set [4] ; /* location of node in uncompressed data 

stream (relative to start of uncompressed 
document data) , 

for COOKIE header it is an index to CookieTable 



uintB 



type j 



/* type of node •/ 



/• If you add a node type, update . . /compiler/readarchive. c */ 



# define EW_DOCUMENT_NODE_TYPE_STRING 1 /« 
ft define EW_DOCUMENT^0DE_TYPE_INCLUDE 2 /« 

* define EW_DOCUMENT_N OD E_TYP E_FORM 3 /« 
ft define EW_DOCUMENT_J$0D E_TYP E_CG I 4 /« 

* define EW_POCUMENT_NODE_TYPE_IMAGEMAP 5 /« 

# define EW_DOCUMENT_NODE_TYPE_COOKIE 6 /« 
ft define EW_DOCUMENT_NODE_TYPE_CACHE 7 /« 
ft define EW_DOCUMENT_NODE_TYPE_VARY 8 /< 



<EMWEB_STRING> •/ 
<EMWEB_INCLUDE> •/ 
<FORM> operation •/ 
CGI operation */ 
Image Map •/ 
<EMWEB_COOKIE> •/ 
CACHE •/ 

content negotiation*/ 



uint8 



attributes ; 



/• node attributes */ 



/* If you add a node attribute, update /compiler/readarchive .c •/ 
ft define EW_poCUMENT_NODE_REP EAT 0x01 /♦ repeat until NULL for 

EMWEB_STRING and 
EMWEB_INCLUDE nodes */ 
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ft define EW_DOCUMENT_KDR_SECURE 



uint8 



reserved [2] ; 



0x02 



/* SECURE flag for cookie •/ 



/* reserved for future use •/ 



uint8 



index [4] ; 



index assigned to node. This may be 
hierarchical. (e.g. the FORM index 
contains a form number and element 
number. the STRING index contains 
a conversion type (most significant 
8 bits) and a string number (least 
significant 24 bits) • 

The COOKIE index contains string number 

for cookie's value generating C-code . 

This index is applied to the switch contained 

in emweb_string () function */ 



} EwsDocumentNode, * EwsDocumentNodeP; 



tdefine SIZEOF_EWS_ DOCUMENT_NODE 12 /* never use sizeof •/ 
^define NEXT_DOCNODE ( x ) ( (EwsDocumentNodeP) ( ( (uint8 »)(x)) \ 

+ SIZEOF_EWS_DOCUMENT_NODE) ) 

*endif /• _EW_DB_H •/ 
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/* 

* $Id: ewjonn.h, v 1.23 1997/06/28 11 : 59 :50 ian Exp $ 
» 

* Product: Emweb 

* Release: IMame: $ 
# 

* %copyRight% 
* 

* Emweb Form definitions between server and generated code. These are 

* also used in typed emweb_STRINGs , etc. 
* 

•/ 

tfifndef _EW_FORM_H 
tfdefine _EW_FORM_H 

include "ew_types .h M 
#include "ew^common.h" 
^include "ews__def .h" 

/* 

* Application Form Serve Function 

* Fills in form template with default values. <We comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*) . 
* 

* context - request context 

* form - pointer to form-specific structure 
• 

* No return value 
•/ 

#ifndef cplusplus 

typedef void EwaFormServe_f ( ) ; 
flelse /• cplusplus */ 

typedef void Ewa Forms erve_f ( EwsContext context, void * form ) ; 
#endif /* cplusplus */ 

/* 

* Application Form Submit Function 

* Processes submitted form, (We comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*) . 
* 

. * context - request context 

* form - pointer to form-specific structure 
# 

* Returns NULL for default response to server (accepted) , or redirection URL. 
*/ 

#ifndef cplusplus 

typedef char * EwaFormSubmit_f ( ) ; 
#else /• cplusplus */ 

typedef char * EwaFormSubmi t_f ( EwsContext context, void * form ); . 
tfendif /• cplusplus */ 

/• 

* Form Field Types 

* Each field element has a type associated with it. Each type has conversion 

* routines to handle conversions between HTML and internal representations. 

* NOTE: if you modify this enuin list, you MUST update the FieldMap in 

* file ewc_code.c!! 
•/ 

typedef enum EwFieldType_e 

ewFieldTypeDeciroalOverride » 0 /* unsigned decimal integer •/ 
# ewFieldTypeRadio /• radio button - serve setup and submit •/ 

!ewFieldTypeRadioField /* radio fields - used in serving form •/ 
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( ewFieldTypeSelect 
, ewFieldTypeSelectField 
, ewFieldTypeSelectMuiti 
, ewFieldTypeCheckbox 
, ewFieldTypeText 
, ewFieldTypelmage 
, ewFieldTypeDecimalUint 
, ewFieldTypeDecimallnt 
, ewFieldTypeHexInt 
, ewFieldType.HexString 
, ewFieldTypeDottedIP 
, ewFieldTypelEEEMAC 
, ewFieldTypeFDDIMAC 
, ewFieldTypeStdMAC 
, ewFieidTypeDecnetlv 
, ewFieldTypeFile 
, ewFieldTypeText Override 
, ewFieldTypeObjectID 
, ewFieldTypeMAX 
3 EwFieidType; 
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/* select enum - serve setup and submit */ 

/* select enum fields - used in serving form */ 

/* multiple select */ 

/* checkbox */ 

/• text field •/ 

/* image field •/ 

/* unsigned integer •/ 

/* signed integer •/ 

/• hexadecimal integer •/ 

/* hexadecimal string */ 

/* dotted IP address */ 

/* IEEE MAC •/ 

/* FDD I MAC */ 

/• standard MAC •/ 

/• Decnet IV Address */ 

/* input type file handle */ 

/• serve input file name field */ 

/• object identifier •/ 

/* MUST BE LAST •/ 



* Form Field Representation 

* The compiler generates the following structure for each element in the 

* form. In general, a FORM document node is placed in the archive at the 

* offset immediately following a VALUE= in TEXT, TEXTAREA , HIDDEN, or PASSWORD 

* field. The field component of the form node index refers to a field 

* structure as defined below. The" field type would be ewFieldTypeText, or 

* one of the derivative extended types such as ewFieldToDottedlP . If a 

* VALUE was specified in the source HTML, the compiler translates it into 

* the appropriate internal representation and creates the def ault_value of 

* the field. (For ewFieldTypeText, this is simply a pointer to the null 

* terminated string. For other fields, this is a pointer to a value whose 

* length is determined by the type in ewFieldTable) . The NAME r part of 

* the field is saved, and the offset into the compiler-generated form for 

* the value and status portions of the field is stored in value_offset and 

* status_of f set . 

* Checkboxes and multiple selections are fairly straight forward. 

* The type ewFieldCheckbox or ewFieldSelectMulti is used, and the 

* node appears where the word "CHECKED " or "SELECTED" may appear. If a 

* VALUE c is present, it is saved in the sel_value field. Otherwise, these 

* types are identical to the extended text types above. 

* Radio buttons and single-select boxes are more complex, with a single 

* NAME 15 , there may be multiple VALUE- where only one applies to the actual 

* value of the form field, with N radio buttons or single select options, 

* the compiler generates N+l field structures ♦ One structure is used to 

.* read and write the value in the internal generated form. This would have 

* type ewFieldTypeRadio or ewFi el dTypeS elect, contain the default value, 

* offsets into the form structure, and the field name. In addition, an array of 

* integers containing all values corresponding to the generated enumerator is 

* saved in enum_list. The other N field structures .would represent each radio 

* button or select option and have the type ewFieldTypeRadioField or 

* ewFieldTypeSelectField. These are referenced by form nodes in the document 

* archive at the location corresponding to where a ■ CHECKED H or "SELECTED" 

* keyword would be inserted. They would not have a name field. Instead, 

* the enum_value field would be set to the value«= enumeration corresponding 

* to the specific field. 
•/ 

typedef struct EwFormField_s 

EwFieidType field_type; /• type of field ♦/ 

const void *def aul t_value ; /• pointer to default value */ 

uintf value_ of f set ; /• offset to value in form struct */ 
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status_of f set; 
♦name ; 
•enum_list ; 
enunu_value ; 
*sel_value ; 



] EwFormField, * EwFormFieldP ; 



/• offset to status in form struc: 

/* name of field from NAME=" M •/ 

/• list of field values by enum ♦/ 

/* SELECT/ RADIO value of field •/ 

/* SELECT multiple value field */ 



Form Representation 

The following structure represents an HTML FORM. This points to the 
application-provided serve and submit functions, indicates the size 
of the compiler-generated form structure, and points to a table of 
field structures as defined above. 



typedef struct EwFormEn try_s 



{ 



Ew a Forms erve__f 
EwaFormSubmi t_f 
uintf 
uintf 

const EwFormField 



•serve. f ; 
* submi t_f ; 
f ornL.si2e; 
f ield_ count ; 
*field_list; 



/• application serve function */ 
/* application submit function */ 
/* sizeof form structure */ 
/* number of fields in form */ 
/• list of fields •/ 



} EwFormEntry, * EwFormEntryP ; 



Document Node Conversion Macros 

These macros convert between the 32-bit node index and a form and element 
index. 



#define EW_FORM_ELEMENT_START 

#define EW_FORM_ELEMENT_END 

#def ine EW_FORM_N0DE_IOTEX_TO_FORM_IND£X < i ) 

*def ine EW_FORM_NODE_IND£X_TO_ELEMENT_INDEX ( i ) 

*def ine EW_FORM_ELEMEOT_TO_NODE_INDEX ( f , e ) 



(0) 

(Oxf ff f ) 

( (i) >> 16) 

( (i) & Oxffff ) 

( {(f) « 16) | (e) ) 



* Form conversion functions. 

* The "To" function converts to HTML ASCII format from the internal 

* representation and writes it directly to the output data stream. 

* The "From" function converts from HTML ASCII contained in a parsed network 

* buffer EwsString and converts it to the internal representation. 
*/ 

typedef void EwFieldTypeTo_f 

( EwsContext context, const EwFormField * field ) ; 
typedef void EwFiel<iTypeFroitL.f 

( EwsContext context, const EwFormField *£ield, EwsStringP stringp ) ; 
typedef void EwFieldTypeFree_f ( void *p ) ; 

#ifdef EW_CONFIG_OPTION_FIELDTYPE_RADIO 

extern EwFieldTypeTo_f ewFieldToRadioField; 

#endif /• EW_CONFIG_OPTION_FIELDTYPE_RADIO •/ 

*if defined (EW_CONFIG_OPTION_FIELDTYFE_RADIO) \ 

| | defined (EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE) 
extern EwFieldTypeFronuf ewFieldFromRadio; 
#endif /• EW_C0NFIG_OPTION_FIELDTYPE_RADIO J SELECT_SINGLE */ 

Mii def EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE 
extern EwFieldTypeTo_f ewFieldToSelectField; 
#endif /• EW_CONFIG_OPTIO^"ELDTYPE_SELECT_S INGLE •/ 

*ifdef EW_CONFIG_OPTION_FIELDTYPE_SELECT_J*ULTIPLE 
extern EwFieldTypeTo_f ewFieldToSelectMul ti ; 

extern EwFieldTypeFronuf ewFieldFromSelectMulti ; 

#endif /* EW_CONFIG_OPTIO*L.FIELDTYPE_SELECT_MULTIFLE */ 
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Hifdef EW_C0NFIG_OPTION_FIELDTYPE_CKECKBOX 

extern EwFieldTypeTo_f ewFieldToCheckbox; 

extern EwFieldTypeFronuf ewFieldFromCheckbox; 

#endif /• EW_C0OTIG_0P7I0N_FIELDTYPE_CHECKB0X •/ 



flifdef 
extern 
extern 
extern 
fcendif 



EW_C0NFIG_OPTI0N_FIELDTYPE_CKECKBOX 
EwF i eldTypeTo_f ewFi e 1 dToTex t ; 

EwFieldTypeFronuf ewFieldFromText ; 

EwFieldTypeFree_f ewFieldFreeText ; 

/• EW_CONFIG_0PTION_FIELDTYPE_CHECKB0X •/ 



extern EwFieldTypeTo_f 



ewFi e 1 dToDe c ima lUi n t ; 



flifdef EW_CONFIG_OPTION_FIELDTYPE_IMAGE 

extern EwFieldTypeFron_f ewFieldFronilmage ; 

#endif /• EW_CONFIG_OPTION_FIELDTYPE_IMAGE •/ 

*if defined (EW_CONFIG_0PTION_FIELDTYPE_DECIMAL_UINT) \ 
| | defined (EH_CONFIG_.OPTION_FIELDTyPE_DECIMALu.INT) \ 
| | defined (EW_CONFIG_0PTION_FIELDTYP£_IMAGE) 

extern EwFieldTypeFronuf ewFieldFronvDecimal ; 

flendif /• EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_UINT | INT 1 IMAGo •/ 

tfifdef EW_CONFIG_0PTI0N_FIELDTYPE_DECIMAL_IOT 
extern EwFieldTypeTo_f ewFieldToDecimallnt ; 

aendif /* EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_INT */ 

#ifdef EW_C0NFI G__0PTI 0N_FI ELDTYP E_HEX_INT 

extern EwFieldTypeTo_f ewFieldToHexInt ; 

extern EwFieldTypeFron\_f ewFieidFromHexlnt ; 

flendif /• EW_CONFIG_OPTION_FIELDTYPE_HEX_INT •/ 

*ifdef EW_CONFIG_OPTION_FIELDTYPE_H£X_STRING 
extern EwFieldTypeTo_f ev/FieldToHexString ; 

extern EwFieldTypeFrom_f ewFieldFromHexStrmg; 
extern EwFieldTypeFree_f ewFieldFreeHexString; 
#endif /* EW_CONFIC_OPTION_FIELDTYPE_HEX_STRING •/ 

ttifdef EW_CONFIG_OPTION_FIELDTY?E_DOTTEDIP 
extern EwFieldTypeTo.f ewFieldToDottedIP ; 

extern EwFieldTypeFronuf ewFieldFromDottedIP; 
#endif /• EW_CONFIG_OPTION_FIELDTYPE_D0TTEDIP •/ 

*ifdef EW CONTIG_OPTION_FIELDTYPE_DECNET_IV 
extern EwFieldTypeTo_f ewFieldToDecnetlV; 
extern EwFieldTypeFron_f ewFieldFromDecnetlV; 
*endif /• EW_CONFIG_OPTION_FIELDTYPE_DECNET_IV •/ 

*if defined (EW_C0NFIG_0PTIOI^FIELDTYPE_IEEE_MAC)\ 
| | defined (EW_C0NFIG_0PTION_FIELDTYPE_FDDI_MAC) \ 
| | defined (EW_CONFIG_0PTION_FIELDTYPE_STD_MAC) 

extern EwFieldTypeFron_f ewFieldFromMAC; 

*endif /• EW_C0NFIG_0PTI0N«FIELDTYPE_IEEE | FDDI | STD_MAC •/ 

tit defined <EW_C0NFIG_0PTI0N_FIELDTY7E_IEEEJMAC)\ 

|| defined (EW_CONFIG_0PTION_FIELDTYPE_STD_MAC) 
extern EwFieldTypeTo_f ewFieldTOlEEEMAC; 
*endif /• EW_C0NFIG_0PTI0N_FIELDTYP EL-IEEE | STD_MAC •/ 

flifdef EW_C0NFIG_OPTI0N_FIELDTYPE_FDDI_MAC 
extern EwFieldTypeTo_f ewFi e 1 dToFDD IMAC ; 

#endif /• EW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC •/ 

Uifdef EW_CONFIG_OPTION_FIELDTYPE_STD_MAC 

extern EwFieldTypeFron_f ewFieldFromStdMAC; 
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ftendif /• EW_CONFIG_OPTION_FIELDTYPE_STD_J4AC •/ 

ftifdef EW_C0NFIG_OPTI0H_FIELDTYPE_FILE 
extern EwFieldTypeFron\_f ewFieldFromFile; 
extern EwFieldTypeFree_f ewFieldFreeFile ; 

ftendif /• EW_COOTIG_OPTION_FIELDTYPE_FILE •/ 

ftifdef EW_COOTIG_OPTION_FIELDTYPE_OID 
extern EwFieldTypeTo_f ewFieldToObj ectlD; 

extern EwFieldTypeFronu.f ewFieldFromOb j ec LID; 

extern EwFieldTypeFree_f ewFieldFreeObj ectlD; 

ftendif /* EW_CONFIG_OPTION_FIELDTYPE_OID */ 



typedef struct EwFormFieldTable_s 



{ 

uintf 

EwFie 1 dTypeTo_f 
EwFieldTypeFronuf 
EwFieldTypeFree_f 
) EwFormFieldTable; 



f ield_size; 
*to_f ; 
*f ronuf ; 
*f ree_f ? 



/• size of field */ 

/• convert to HTML •/ 

/• convert from HTML •/ 

/* free dynamic pointer «/ 



ftifdef EW_DEFINE_FIELD__TYPE_TABLE 

const EwFormFieldTable ewFormFieldTable [] 



I 



{ sizeof (uint32) , ewFieldToDecimalUint , NULL, 



ft ifdef EW_CONFIG_OPTION_FIELDTYPE_RADIO 

, { sizeof (int), NULL, 

t { o, ewFieldToRadioField, 
ft else /* EW_CONFIG_OPTION_FIELDTYPE_RADIO •/ 

, { 0, NULL, 

, { 0, NULL, 
ft endif /• EW_CONFIG_OPTI0N_FIELDTYPE_RADI0 */ 



ewFi eldFromRadio , 
NULL, 

NULL, 
NULL, 



ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 
ft 



ifdef EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE 

,{ sizeof (int), NULL, ewFieldFromRadio, 

f { 0, ewFieldToSelectField, NULL, 

else /* EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE */ 

, { 0, NULL, NULL, 

, [ r0, NULL, NULL, 

endif /• EW_CONFIG_OPTION_FIELDTYPE_SELECT_S INGLE */ 



NULL ) 



NULL ) 

NULL ) 

NULL ) 

NULL ) 



NULL ] 

NULL ) 

NULL } 

NULL ) 



ifdef £W_C0NFIG_OPTION_FIELDTYPE_SELECT_>JULTIPLE 

, {sizeof (boolean) , ewFieldToSelectMul ti, ewFieldFromSelectMulti , NULL ) 
else /* EW_CONFIG_OPTIOI^FIELDTYPE_SELECT_MULTIPLE */ 

,{ 0, ^ NULL, NULL, NULL ) 

endif /* ew_config_option_fieldtypel.select_multiple */ 

ifdef EW_CONFIG_OPTION_FIELDTYPE_CHECKB0X 

,{ sizeof (boolean) / ewFieldTo Checkbox, ewFieldFromCheckbox, NULL ) 
else /• ew_config_optioh„fieldtype_checkbox •/ 

, { 0, ~ NULL, NULL, NULL ) 

endif /* £W_CONFlG_OPTlON_FIELDTYPE_CHECKBOX ♦/ 

ifdef EW CONFIG_OPTION_FIELDTYPE_TEXT 

,( sizeo7(char *), ewFieldToText, ewFieldFromText , ewFieldFreeText ) 

else /• EW CONFIG_OPTION_FIELDTYPE_TEXT */ 

, [ 0, NULL, NULL, NULL } 

endif /♦ EW_CONFI G_OPTI ON_FI ELDTYP E_TEXT •/ 

ifdef EW_CONFIG_0PTION_FIELDTYPE_IMAGE 

,1 sizeof (uint32) , NULL, ewFieldFromDecimal , NULL ) 

else /♦ EW CONFIG_OPTION_FIELDTYPE_IMAGE */ 

#{ 0t " NULL, NULL, NULL } 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 . PCT/US97/13817 



-179- 

ewjorn.h Sat Jun 28 07:59:50 1997 6 

# endif /• EW_CONFIG_OPTIO^_FIELDTYPE_IMAGE */ 

« ifdef EW_CONFIG_OPTION.FIELDTYPE_DECIMAL.UINT 

, { sizeof (uint32) , ewFieldToDecimalUint , ewFieldFromDecimal , NULL ) 
U else /• EW_CONFIG_OPTION_FIELDTYPE.DECIMAL.UINT */ 

, { 0, NULL, NULL, NULL ) 

* endif /* EW_CONFIG_OPTION_FIELDTY?E_DECIMAL_UINT •/ 

# ifdef EW_CONFIG_OPTION_FIELDTy?E_DECIMAL_INT 

, { sizeof (uint32) , ewFieldToDecimallnt, ewFieldFromDecimal , NULL ) 
ft else /• EW_CONFIG_OPTION_FIELDTYPE_D£CIMAL_INT •/ 

,( 0, NULL, NULL, NULL } 

ft endif /• E>7.CONFIG_OPTION_FIELDTYPE_DECIMAL_INT •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_HEX_INT 

, { sizeof (uint32) , ewFaeldToHexlnt, ewFieldFromHexlnt, NULL ) 

ft else /* EW_CONFIG_OPTION_FIELDTYPE.HEX.INT */ 

, ( 0, NULL, NULL, NULL } 

ft endif /• EW.CONFIG_OPTION_FIELDTYPE_HEX.INT */ 

* ifdef EW_CONFIG.OPTION_FIELDTYPE_HEX_STRING 

, { sizeof (EwsFormFieldHexString) , ewFieldToHexS tring, ewFieldFromHexString, 
ewFieldFreeHexString ) 
ft else /* EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING ♦/ 

, { 0, NULL, NULL, NULL ) 

ft endif /• EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYFE_DOTTEDIP 

, I sizeof (uint32) , ewFieldToDottedIP, ewFieldFromDottedIP, NULL ) 

ft else /* EW_CONFIG_OPTION_FIELDTYPE_DOTTEDIP */ 

,(0, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_DOTTEDIP •/ 

ft ifdef EW_CONFIG.OPTION_FIELDTYFE_IEEE_MAC 

,{ 6, ewFieldToIEEEMAC, ewFieldFroinMAC, NULL ) 

ft else /• EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC */ 

, ( 0, NULL, NULL, NULL ) 

ft endif /• EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC */ 

ft ifdef EW_C0NFIG_0PTION_FIELDTYPE_FDDI_MAC 

, ( 6, ewFieldToFDDIMAC, ewFieldFromMAC, NULL ) 

ft else /• EW_CONFIG.OPTION_FIELDTYPE.FDDI.MAC •/ 

, { 0, NULL, NULL, NULL ] 

ft endif /* EW_CONFIG.OPTION.FIELDTYPE.FDDI.MAC •/ 

ft ifdef EW_CONFIG.OPTION_FIELDTYPE_STD.MAC 

,{6, ewFieldToIEEEMAC, ewFieldFromS tdMAC, NULL } 

ft. else /* EW_CONFIG_OPTI0N_FIELDTYPE_STD_MAC */ 

,10, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_STD_MAC •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPELJ>ECNET_IV 

,{ sizeof (uintl6), ewFieldToDecnetIV, ewFieldFromDecnetlv, NULL } 

* else /* EW_CONFIG.OPTION.FIEX-DTYPE.DECNET.IV •/ 

,{0, NULL, NULL, NULL ) 

ft endif /• EW_CONFIG.OPTI ON.FIELDTYPE.DECNET.IV */ 

ft ifdef EW_CONFIG.0PTION.FIELDTYPE.FILE 

,( sizeof (EwaFileHandle) , NULL, ewFieldFromFile, ev/FieldFreeFile ) 

,( sizeof (char *), ewFieldToText, ewFieldFromText , ewFieldFreeText } 

ft else /* IEW_CONFIG.OPTION.FIELDTYPE.FILE •/ 

, { 0, NULL, NULL, NULL ) 

,10. NULL, NULL, NULL ) 

ft endif /* EW.CONF I G.OPTI ON.FI ELDTYP E.FI LE */ 
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# ifdef EW_COI^IG_OPTION_FIELDTYPE_OID 

, { sizeof (EwsFormFieldObjectlD) , ewFieldToObj ectID, ewFieldFromObj ect::D, 
ewFieldFreeObjectlD ) 

* else /* EW_CONFIG_OPTION_FIELDTYPE_OID •/ 

, { 0, NULL, NULL, NULL } 

# endif /* EW_CONFIG_OPTIO^FIELDTYPE_OID */ 

) ? 

#else /* EW_DEFINE_FOR2^_FIELD_TYP EATABLE ♦/ 
extern const EwFormFieldTable ewFormFieldTable [) ; 
*endif /* EW_DEFINE_FOR>4_FIELD_TYPE_TABLE */ 

* endif /* _EW_FORM_H •/ 
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/• 

* $Xd: ev_imap.h,v 1.7 1997/05/21 21:55:48 ian Exp $ 

* Product: EmWeb 

* Release: $Najne: $ 
• 

* %CopyRight% 
• 

* EmWeb image map definitions between server and generated code 
•/ 

flifndef _EW_IMAP_H 
M define _EW_imaf_H 



^include "ew_types ,h n 



typedef struct EwlmageMap_s 



I 

uint32 
uint32 
uint32 
uint32 
const char 
} EwimageMap, 



ul_x; /• upper-left X coordinate •/ 
ul_y; /• upper-left Y coordinate */ 
lr_x; /♦ lower-right X coordinate •/ 
lr_y; /* lower-right Y coordinate •/ 
•url; /* relative redirection URL •/ 
* EwlmageMapP; 



typedef struct EwlmageMapTable_s 



( 

const EwimageMap ♦map_table; /♦ table of map entries */ 
uintf map_entries; /* size of map_table •/ 

const char *def aul t_url ; /* default URL, or NULL if not specified V 
J EwimageMapTable, * EwlmageMapTableP; 

#endif /• __EW_imap_h */ 
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CLAIMS 

What is claimed is: 

1 . A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document w ritten in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

serving the text document to a client which interprets the mark-up language; and 
when the location is encountered, serving to the client a sequence of characters derived 

from a result of executing a sequence of instructions represented by the segment of application 

source code. 

2. The method of claim 1 , further comprising the step of: 

including in the document at least one more code tag containing a segment of application 
source code. 

3. The method of claim 1, wherein the step of defining further comprises the step of: 
providing a plurality of documents which collectively define the graphical user interface: 

and :v 

storing the text document and the plurality of documents as files in a directory tree. 

4. The method of claim 3, further comprising the steps of: 

compiling the directory tree and the files therein into an archive including content 
sources; and 

decompiling a content source back into the text document before the step of ser/ing. 

5. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 . . PCT/US97/13817 

- 183 - 

including in the document a string identified by prototype tags; 

serving the text document to a prototyping client which interprets the mark-up language 
but does not recognize and does not display the prototype tags, but does display the string; and 

compiling the text document into a content source, omitting the prototype tags and the 
string identified thereby. 

6. The method of claim 5, further comprising the step of: 

including at a location in the document a code tag containing a segment of application 
source code, wherein the prototyping client does not recognize and does not display the code tag; 
and 

the step of further comprising including the segment of application source code in the 
content source. 

7. The method of claim 6, further comprising the steps of: 
decompiling the content source into a replica of the text document; 
serving the replica to a user client; and 

when the location is encountered in the replica, serving to the user client a character 
stream derived from a result generated by executing the segment of application source code. 

8. The method of claim 7, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

9. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

including in the document a string identified by prototype tags; 
compiling the text document into a content source; 
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decompiling the content source into a replica of the text document; 

serving the replica of the text document to a client which interprets the mark-up language; 

and 

when the location is encountered in the replica, serving to the client a character stream 
generated by executing the segment of application source code. 

10. The method of claim 9, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

11. A software product recorded on a medium, the software product comprising a mark-up 
language compiler which can compile a mark-up language document into a data structure in a 
native application programming language, the compiler recognizing one or more code tags which 
designate included text as a segment of application source code to be saved in a file for 
compilation by a compiler of the native application programming language. 

12. A method for providing a graphical user interface haying displayed forms for ertry of 
data, comprising the steps of: 

defining elements of the graphical user interface in at least one text document w ritten in a 

mark-up language; 

naming in the document a data item requested of a user and used by an application 
written in a native application programming language; and 

compiling the text document into a content source including a data structure definition in 
the native application programming language for the named data item. 

13. The method of claim 12, wherein the text document is viewed using a prototype client 
during development and is viewed using a user client during use, further comprising the steps of: 

naming the data item within a tag understood in the mark-up language for viewing by 
both the prototype client and the user client; and 
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including in the content source a definition of a function to provide a default value for the 
data item when the content source is served and a definition of a function to perform an 
application specific operation when the data item is returned by the user client. 

14. In a computer-based apparatus for developing a graphical user interface for an application, 
the apparatus including an editor which can manipulate a document written in a mark-up 
language and a viewer which can display a document written in the mark-up language, the 
apparatus further comprising: 

a mark-up language compiler which recognizes a code tag containing a source code 
fragment in a native application source code language, the code tag not otherwise pail of the 
mark-up language, the compiler producing as an output a representation in the native application 
source code language of the document, including a copy of the source code fragment. 

1 5. The apparatus of claim 1 4, wherein the mark-up language compiler further recognizes 
begin and end prototype tags not otherwise part of the mark-up language, the output 
representation omitting the begin and end prototype tags and all content appearing therebetween 
in the document. 

16. A method for developing and prototyping graphic user interfaces for an application 
comprising the steps of: 

accessing an HTML file, 

encapsulating portions of said HTML and entering source code therein, 
producing a source module from said HTML with encapsulated portions, 
producing source code for a server, and 

cross compiling and linking said application, said source code module and said server 
thereby producing executable object code. 

1 7. The method of claim 1 6, further comprising the steps of: 
running said object code, 

executing said compiled encapsulated code when requested by a viewer, wherein said 
encapsulated code is associated with said application. 
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1 8. The method of claim 1 7, further comprising the steps of: 

converting data returned by execution of said compiled encapsulated code into a form 
displayable by said viewer. 

19. The method of claim 18, wherein the data returned by executing said compiled 
encapsulated code changes over time as a result of changes within the application. 

20. A data structure fixed in a computer readable medium, the data structure for use in a 
computer system including a client and a server in communication with each other, the data 
structure comprising: 

cross-compiled, stored and linked, HTML files with encapsulated portions containing 
executable code associated with said application, server code, and application code, wherein said 
executable code is run when the HTML file is served thereby providing real time dynamic data 
associated with said application. 
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